0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001100)={{r6}, "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"}) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:25:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xe) 17:25:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:25:50 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xa, 0x0, &(0x7f00000000c0)) 17:25:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='name=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00'/85]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:25:50 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xffffffff, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) 17:25:50 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xffffffff, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) [ 2909.300087] FAULT_INJECTION: forcing a failure. [ 2909.300087] name failslab, interval 1, probability 0, space 0, times 0 [ 2909.303578] CPU: 0 PID: 14516 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2909.305395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2909.307591] Call Trace: [ 2909.308312] dump_stack+0x107/0x167 [ 2909.309267] should_fail.cold+0x5/0xa [ 2909.310247] ? getname_flags.part.0+0x50/0x4f0 [ 2909.311412] should_failslab+0x5/0x20 [ 2909.312385] kmem_cache_alloc+0x5b/0x310 [ 2909.313417] ? strncpy_from_user+0x9e/0x470 [ 2909.314542] getname_flags.part.0+0x50/0x4f0 [ 2909.315626] getname_flags+0x9a/0xe0 [ 2909.316435] __x64_sys_rename+0x65/0xa0 [ 2909.317296] do_syscall_64+0x33/0x40 [ 2909.318101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2909.319214] RIP: 0033:0x7f10a04edb19 [ 2909.320018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2909.323903] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2909.323995] 9pnet: Insufficient options for proto=fd [ 2909.325537] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2909.325549] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2909.325560] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2909.325571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2909.325582] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 [ 2909.333383] 9pnet: Insufficient options for proto=fd 17:25:50 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xffffffff, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) [ 2909.379624] 9pnet: Insufficient options for proto=fd 17:25:50 executing program 7: ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) getsockopt$bt_BT_POWER(r0, 0x112, 0xa, 0x0, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f66696c6530202820f45c0308a2904be324d02d5bccd08b7fc62c7202d5bd13abc4240731521b30e4c0227c40ed6e2b4095ceb401b0d5fe800a78ab27927ef8ae6a01add7af2538463ae028f6d8212c987ad10a1b236f53e539a7a30e90a35e64a3aebbd17ae8181d245d64771c58d42aaaa6c79e129f4435b0e451f388925865535613f453776506cf0563e6711488481bf7d4447830071b930405624c25021b5c122880bce59216f25fcf622f8b425fd696e641accc0ad24941e20d9e0a637d8b0dd9f8bfcc362340778026a556c5d3df5056259182e9f958a41aae3ef1a323feaccc727cca5827573ffc650b5859a6001584fa143b7b7d31c137c43e95cb14cc88f52040e0be64ab8bc0d24418df5bfc8fa0530046ecf26ffce66d416ce803db3232c0b20c0caa254ab442912f68fbc2f514b96a64a0c1c32531d016da671f2e14120f0b606d1deb09feff7413a329db865160f617ce2f7c67919d0f9decb3c03d337186e27b4694e580a91683c0cf7715ad42fc320708dbfc8922f0655dd66d5e496d49d3c264481a5ea32020217d2d2e29207d20202520210a1e137b6b94cc4313a267de90b20fcbe0644a583eac0a415aafa7e616c6f5f1e6d128a75f9877c2e10e334bdd5782e153360b6e3cb98a6a6c314680e8a7d80232677aed5ff6b9f1d90db870f5516ddebc361f1f56da6824cf3bfd0ea3109f7e1055616acf7f902fc120931b3ff602a23723e56573a5534105e9490c3911b5e2fbb3276e32192c07a638fd68a394c83236fd659a8bab46e687bf25f472"], 0x22f) 17:25:50 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xffffffff, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) [ 2909.451054] 9pnet: Insufficient options for proto=fd [ 2909.460521] 9pnet: Insufficient options for proto=fd 17:25:50 executing program 4: syz_io_uring_setup(0x583b, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) 17:25:50 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x971c, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x1}}, 'mnt/encrypted_dir\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r11}}, 0x400001) 17:25:50 executing program 4: syz_io_uring_setup(0x583b, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) 17:25:50 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x386e, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="01000000000000006d6e742f656e237279707465645f64697200"]) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="fddc43d87af2f5f1afbee94986a3e998f69164e231f374aeaf830f9d3e9b7fec4ea58161d51fc21e259f5d7cd747282b258ea568ff0a9b208d81d523bb9ad30e42f7ff1bb22ca2b1b6d1f4404fe5431e00a7376653bf4335d7c703c78d6618d2786df314d74d4ad3d2aceb449fa7797de48de187c93aa5c692f68bc110f1cb8648616af8650437861724898ad5a8c33cf291cddc85392b9ab160edba9fd591615ea8491afd9c9f7a3e3750f3b37e7d23fcbed91790e8d51787a678855d1e1a6356fa2314f9db3d11eabe84df3257e34ef91e36031fe981df5eb056fb0ca5a4c82171932ecb7a108429f9c7114d8de30fbad5", @ANYRESHEX=r7, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) poll(&(0x7f0000000600)=[{r8, 0x8000}, {r0, 0x8}, {0xffffffffffffffff, 0x1000}], 0x3, 0xffffffe1) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r10, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x1) [ 2909.694700] 9pnet: Insufficient options for proto=fd [ 2909.722556] 9pnet: Insufficient options for proto=fd [ 2909.726820] 9pnet: Insufficient options for proto=fd [ 2910.545470] 9pnet: Insufficient options for proto=fd 17:26:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 5) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:26:04 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) mount(&(0x7f0000000600)=@md0, &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='overlay\x00', 0x220000, &(0x7f0000000700)='/\x00') syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:04 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x3e, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:26:04 executing program 4: syz_io_uring_setup(0x583b, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) 17:26:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xf) 17:26:04 executing program 7: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @any, 0x400, 0x1}, 0xe) 17:26:04 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000600)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="01c100020000000018000000", @ANYRES32=r2, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) mkdirat(r0, &(0x7f0000000680)='./mnt\x00', 0x44) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xd) 17:26:04 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) [ 2923.525468] FAULT_INJECTION: forcing a failure. [ 2923.525468] name failslab, interval 1, probability 0, space 0, times 0 [ 2923.528505] CPU: 0 PID: 14571 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2923.529963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2923.531724] Call Trace: [ 2923.532279] dump_stack+0x107/0x167 [ 2923.533040] should_fail.cold+0x5/0xa [ 2923.533832] ? create_object.isra.0+0x3a/0xa30 17:26:04 executing program 7: r0 = timerfd_create(0x0, 0x0) fchmod(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0xa, 0x0, &(0x7f00000000c0)) [ 2923.534787] should_failslab+0x5/0x20 [ 2923.535694] kmem_cache_alloc+0x5b/0x310 [ 2923.536565] create_object.isra.0+0x3a/0xa30 [ 2923.537504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2923.538703] kmem_cache_alloc+0x159/0x310 [ 2923.539573] ? strncpy_from_user+0x9e/0x470 [ 2923.540483] getname_flags.part.0+0x50/0x4f0 [ 2923.541430] getname_flags+0x9a/0xe0 [ 2923.542235] __x64_sys_rename+0x65/0xa0 [ 2923.543103] do_syscall_64+0x33/0x40 [ 2923.543898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2923.545108] RIP: 0033:0x7f10a04edb19 [ 2923.545913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2923.546441] 9pnet: Insufficient options for proto=fd [ 2923.549834] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2923.549862] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2923.549873] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2923.549884] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2923.549895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2923.549906] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 [ 2923.556351] 9pnet: Insufficient options for proto=fd [ 2923.631510] 9pnet: Insufficient options for proto=fd [ 2923.641786] 9pnet: Insufficient options for proto=fd [ 2923.653680] 9pnet: Insufficient options for proto=fd 17:26:04 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) 17:26:04 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="dcdf6885a3bd5ef08ce1b7002e156e8e4a9e75863f6ecda7517c606a5991c8624da4018bb0fca6f23884335abe90da9def6d279a46d66f4b4a1fb53339cdf27b768b5fdc53", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x1}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xd3c9, @any, 0x5}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xa, 0x0, &(0x7f00000000c0)) 17:26:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0xffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 2923.807900] 9pnet: Insufficient options for proto=fd [ 2923.843767] 9pnet: Insufficient options for proto=fd 17:26:18 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) 17:26:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 2938.140684] 9pnet: Insufficient options for proto=fd 17:26:18 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x48, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:26:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="7472f0f8b7c49be7fb976e6f3d9956eb47bf6f907db818212f890ecef0f09e99ce30163543837e73e359cae85557", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x10) 17:26:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f0000000240)='./file0\x00', 0x7, 0x0, 0x0, 0x12124ec, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="020073a471cbe5e13279742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x40}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x100, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r10, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x1) 17:26:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xe) 17:26:18 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000600)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="01c100020000000018000000", @ANYRES32=r2, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) mkdirat(r0, &(0x7f0000000680)='./mnt\x00', 0x44) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 2938.172947] FAULT_INJECTION: forcing a failure. [ 2938.172947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2938.174768] CPU: 0 PID: 14618 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2938.175714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2938.176717] Call Trace: [ 2938.177068] dump_stack+0x107/0x167 [ 2938.177511] should_fail.cold+0x5/0xa [ 2938.177983] strncpy_from_user+0x34/0x470 [ 2938.178509] getname_flags.part.0+0x95/0x4f0 [ 2938.179056] getname_flags+0x9a/0xe0 [ 2938.179516] __x64_sys_rename+0x65/0xa0 [ 2938.180003] do_syscall_64+0x33/0x40 [ 2938.180464] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2938.181092] RIP: 0033:0x7f10a04edb19 [ 2938.181544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2938.183798] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2938.184732] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2938.185627] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2938.186508] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2938.187397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2938.188264] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 [ 2938.196036] 9pnet: Insufficient options for proto=fd [ 2938.210395] 9pnet: Insufficient options for proto=fd 17:26:18 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) [ 2938.227209] 9pnet: Insufficient options for proto=fd 17:26:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') getdents64(0xffffffffffffffff, &(0x7f0000000680)=""/50, 0x32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000010000001800000086593979e012c0d7a74f3e7f6abc1ee37f1ce58c678625d91475b08e7a94371aa719cb8c488bf3480b27c9fc56a3d4071bfd532a5a55773419d5a3bbbd9518f69dc0f2a90a8fae222fece6dbb6f185ac8d4d99c0da12e89cd26c07d4ba8c6e64a1ce9677ff08b204e3433161972a1ff22520b1449a2b21aac030a015082dc8d4fb16f8e27bf8fa6b6baaa0516c09013686a5", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000600)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) 17:26:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) mount(&(0x7f0000000600)=@md0, &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='overlay\x00', 0x220000, &(0x7f0000000700)='/\x00') syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 2938.352608] 9pnet: Insufficient options for proto=fd [ 2938.380427] 9pnet: Insufficient options for proto=fd [ 2938.387398] FAULT_INJECTION: forcing a failure. [ 2938.387398] name failslab, interval 1, probability 0, space 0, times 0 [ 2938.388716] CPU: 0 PID: 14635 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2938.389492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2938.390508] Call Trace: [ 2938.390825] dump_stack+0x107/0x167 [ 2938.391238] should_fail.cold+0x5/0xa [ 2938.391676] ? jbd2__journal_start+0x190/0x7e0 [ 2938.392194] should_failslab+0x5/0x20 [ 2938.392300] 9pnet: Insufficient options for proto=fd [ 2938.392627] kmem_cache_alloc+0x5b/0x310 [ 2938.394246] ? ext4_dx_find_entry+0x600/0x600 [ 2938.394768] jbd2__journal_start+0x190/0x7e0 [ 2938.395272] __ext4_journal_start_sb+0x214/0x390 [ 2938.395814] ext4_rename+0x96d/0x2bc0 [ 2938.396249] ? ext4_tmpfile+0x440/0x440 [ 2938.396707] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2938.397303] ? lock_acquire+0x197/0x470 [ 2938.397754] ? vfs_rename+0xc68/0x1510 [ 2938.398200] ? lockref_get+0x11/0x50 [ 2938.398623] ? find_held_lock+0x2c/0x110 [ 2938.399098] ? down_write+0xe0/0x160 [ 2938.399526] ext4_rename2+0x1af/0x240 [ 2938.399955] vfs_rename+0xd6c/0x1510 [ 2938.400380] ? vfs_unlink+0x8b0/0x8b0 [ 2938.400817] ? lookup_dcache+0x65/0x130 [ 2938.401275] do_renameat2+0xae1/0xbf0 [ 2938.401713] ? __ia32_sys_link+0x80/0x80 [ 2938.402182] ? __virt_addr_valid+0x170/0x5d0 [ 2938.402683] ? __check_object_size+0x319/0x440 [ 2938.403223] __x64_sys_rename+0x7d/0xa0 [ 2938.403677] do_syscall_64+0x33/0x40 [ 2938.404099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2938.404678] RIP: 0033:0x7f10a04edb19 [ 2938.405097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2938.407174] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2938.408028] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2938.408835] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2938.409637] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2938.410439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2938.411250] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 [ 2938.466467] 9pnet: Insufficient options for proto=fd [ 2953.280807] FAULT_INJECTION: forcing a failure. [ 2953.280807] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.282496] CPU: 1 PID: 14645 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2953.283410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.284759] Call Trace: [ 2953.285102] dump_stack+0x107/0x167 [ 2953.285556] should_fail.cold+0x5/0xa [ 2953.286026] ? create_object.isra.0+0x3a/0xa30 [ 2953.286602] should_failslab+0x5/0x20 [ 2953.287093] kmem_cache_alloc+0x5b/0x310 [ 2953.287608] ? __ext4_find_entry+0x85b/0xfc0 [ 2953.288158] ? __ext4_find_entry+0x9f1/0xfc0 [ 2953.288714] create_object.isra.0+0x3a/0xa30 [ 2953.289265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2953.289913] kmem_cache_alloc+0x159/0x310 [ 2953.290448] ? ext4_dx_find_entry+0x600/0x600 [ 2953.291032] jbd2__journal_start+0x190/0x7e0 [ 2953.291575] __ext4_journal_start_sb+0x214/0x390 [ 2953.292155] ext4_rename+0x96d/0x2bc0 [ 2953.292624] ? ext4_tmpfile+0x440/0x440 [ 2953.293114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.293758] ? lock_acquire+0x197/0x470 [ 2953.294244] ? vfs_rename+0xc68/0x1510 [ 2953.294899] ? lockref_get+0x11/0x50 [ 2953.295419] ? find_held_lock+0x2c/0x110 [ 2953.296093] ? down_write+0xe0/0x160 [ 2953.296585] ext4_rename2+0x1af/0x240 [ 2953.297057] vfs_rename+0xd6c/0x1510 [ 2953.297519] ? vfs_unlink+0x8b0/0x8b0 [ 2953.297993] ? lookup_dcache+0x65/0x130 [ 2953.298487] do_renameat2+0xae1/0xbf0 [ 2953.298973] ? __ia32_sys_link+0x80/0x80 [ 2953.299549] ? __virt_addr_valid+0x170/0x5d0 [ 2953.300243] ? __check_object_size+0x319/0x440 [ 2953.300928] __x64_sys_rename+0x7d/0xa0 [ 2953.301591] do_syscall_64+0x33/0x40 [ 2953.302157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2953.302806] RIP: 0033:0x7f10a04edb19 [ 2953.303360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.305716] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2953.306836] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2953.308066] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2953.308988] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.309997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2953.310893] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 17:26:34 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x4a, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:26:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x11) 17:26:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) mount(&(0x7f0000000600)=@md0, &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='overlay\x00', 0x220000, &(0x7f0000000700)='/\x00') syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:34 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) 17:26:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0200000000006dabafb299e9a0e666707465645f64697200b0acef1357c659b2eae7e303bff36ac89644fc443b76316ae110c69e092d05c650cd6eb5910aa6a8c14f9b8d2a08e81e62fac7591fbba802e4174092f9b6819a6afb772244f6e7ecc86399b0cb76cd9e2a4626e5db0dd43847f741f9a96beb7ba8bc791bd8bd64c43c8de234950d117e0246"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:26:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xf) [ 2953.352789] 9pnet: Insufficient options for proto=fd [ 2953.364680] 9pnet: Insufficient options for proto=fd [ 2953.369938] 9pnet: Insufficient options for proto=fd 17:26:34 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) [ 2953.405386] 9pnet: Insufficient options for proto=fd [ 2953.414928] 9pnet: Insufficient options for proto=fd [ 2953.425545] 9pnet: Insufficient options for proto=fd 17:26:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 9) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:26:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001100)={{r6}, "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"}) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000600)}, 0x50008, 0x0, 0x1fe, 0x9, 0x4, 0xfffffffb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0200000000ffd4006d6e742f656e637279bef91321b831c312dd"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r10}}, 0x1) 17:26:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000011000100180000008cd2b9153180d0fb", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:34 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) [ 2953.557643] 9pnet: Insufficient options for proto=fd [ 2953.575499] FAULT_INJECTION: forcing a failure. [ 2953.575499] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.576915] CPU: 1 PID: 14671 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2953.577716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.578695] Call Trace: [ 2953.579051] dump_stack+0x107/0x167 [ 2953.579506] should_fail.cold+0x5/0xa [ 2953.579963] ? create_object.isra.0+0x3a/0xa30 [ 2953.580493] should_failslab+0x5/0x20 [ 2953.580943] kmem_cache_alloc+0x5b/0x310 [ 2953.581433] create_object.isra.0+0x3a/0xa30 [ 2953.581964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2953.582552] kmem_cache_alloc+0x159/0x310 [ 2953.583049] jbd2__journal_start+0x190/0x7e0 [ 2953.583551] __ext4_journal_start_sb+0x214/0x390 [ 2953.584096] ext4_rename+0x96d/0x2bc0 [ 2953.584536] ? ext4_tmpfile+0x440/0x440 [ 2953.584990] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.585588] ? lock_acquire+0x197/0x470 [ 2953.586039] ? vfs_rename+0xc68/0x1510 [ 2953.586499] ? lockref_get+0x11/0x50 [ 2953.586942] ? find_held_lock+0x2c/0x110 [ 2953.587431] ? down_write+0xe0/0x160 [ 2953.587881] ext4_rename2+0x1af/0x240 [ 2953.588346] vfs_rename+0xd6c/0x1510 [ 2953.588782] ? vfs_unlink+0x8b0/0x8b0 [ 2953.589227] ? lookup_dcache+0x65/0x130 [ 2953.589695] do_renameat2+0xae1/0xbf0 [ 2953.590159] ? __ia32_sys_link+0x80/0x80 [ 2953.590628] ? __virt_addr_valid+0x170/0x5d0 [ 2953.591164] ? __check_object_size+0x319/0x440 [ 2953.591696] __x64_sys_rename+0x7d/0xa0 [ 2953.592159] do_syscall_64+0x33/0x40 [ 2953.592592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2953.593189] RIP: 0033:0x7f10a04edb19 [ 2953.593628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.595755] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2953.596626] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2953.597450] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2953.598274] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.599132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2953.599955] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 17:26:34 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) [ 2953.642803] 9pnet: Insufficient options for proto=fd [ 2953.647452] 9pnet: Insufficient options for proto=fd [ 2953.654273] 9pnet: Insufficient options for proto=fd 17:26:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x12) [ 2953.688991] 9pnet: Insufficient options for proto=fd [ 2953.723881] 9pnet: Insufficient options for proto=fd 17:26:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x13) 17:26:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x10) 17:26:47 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x4c, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:26:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2cc4bcffff6f3d", @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:26:47 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 1) 17:26:47 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) 17:26:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:26:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r10, r4, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd_index=0x7, 0x6, &(0x7f0000000680)="8d75cf49add209024e02f1feb57e9e500f069981172940de7365b017191cb8d4d55e200702f4b58cea1cd54cbd99927745cc54a12623082337ced80edc876bcd12db266e75f21587cfddc562038bdcf1fc55f5c0b1c43105243d0db17f996a25ef5429ecc8f6c83b6bf1", 0x6a, 0x2, 0x1}, 0x9) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 2966.579014] FAULT_INJECTION: forcing a failure. [ 2966.579014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2966.581726] CPU: 0 PID: 14708 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 2966.583170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2966.584881] Call Trace: [ 2966.585430] dump_stack+0x107/0x167 [ 2966.586183] should_fail.cold+0x5/0xa [ 2966.586979] _copy_from_user+0x2e/0x1b0 [ 2966.587822] copy_clone_args_from_user+0x147/0x790 [ 2966.588842] ? lock_acquire+0x197/0x470 [ 2966.589658] ? sighand_ctor+0x40/0x40 [ 2966.590448] ? find_held_lock+0x2c/0x110 [ 2966.591299] ? ksys_write+0x21a/0x260 [ 2966.592117] ? lock_downgrade+0x6d0/0x6d0 [ 2966.593077] __do_sys_clone3+0x9d/0x320 [ 2966.593917] ? __do_sys_clone+0x110/0x110 [ 2966.594793] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2966.595491] 9pnet: Insufficient options for proto=fd [ 2966.595819] ? wait_for_completion_io+0x270/0x270 [ 2966.595848] ? rcu_read_lock_any_held+0x75/0xa0 [ 2966.598884] ? vfs_write+0x354/0xb10 [ 2966.599687] ? fput_many+0x2f/0x1a0 [ 2966.600447] ? ksys_write+0x1a9/0x260 [ 2966.601244] ? __ia32_sys_read+0xb0/0xb0 [ 2966.602096] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2966.603192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2966.604255] ? trace_hardirqs_on+0x5b/0x180 [ 2966.605173] do_syscall_64+0x33/0x40 [ 2966.605960] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2966.607058] RIP: 0033:0x7f7b970cfb19 [ 2966.607840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2966.611746] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2966.613316] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 2966.614807] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2966.616282] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2966.617778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2966.619285] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 [ 2966.622691] FAULT_INJECTION: forcing a failure. [ 2966.622691] name failslab, interval 1, probability 0, space 0, times 0 [ 2966.625260] CPU: 0 PID: 14710 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2966.626359] 9pnet: Insufficient options for proto=fd [ 2966.626698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2966.626704] Call Trace: [ 2966.626726] dump_stack+0x107/0x167 [ 2966.626757] should_fail.cold+0x5/0xa [ 2966.631675] ? create_object.isra.0+0x3a/0xa30 [ 2966.632641] should_failslab+0x5/0x20 [ 2966.633438] kmem_cache_alloc+0x5b/0x310 [ 2966.634309] create_object.isra.0+0x3a/0xa30 [ 2966.635229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2966.636293] kmem_cache_alloc+0x159/0x310 [ 2966.637170] jbd2__journal_start+0x190/0x7e0 [ 2966.638102] __ext4_journal_start_sb+0x214/0x390 [ 2966.639109] ext4_evict_inode+0x8f4/0x1a60 [ 2966.640000] ? ext4_da_write_begin+0xd40/0xd40 [ 2966.640942] ? rwlock_bug.part.0+0x90/0x90 [ 2966.641822] ? ext4_da_write_begin+0xd40/0xd40 [ 2966.642763] evict+0x32b/0x8c0 [ 2966.643441] ? new_inode+0x250/0x250 [ 2966.644223] ? lock_downgrade+0x6d0/0x6d0 [ 2966.645083] ? rwlock_bug.part.0+0x90/0x90 [ 2966.645978] ? fsnotify_grab_connector+0x11a/0x250 [ 2966.647027] iput.part.0+0x4b9/0x6d0 [ 2966.647810] ? trace_event_raw_event_ext4_es_lookup_extent_enter+0x300/0x300 [ 2966.649274] iput+0x58/0x70 [ 2966.649898] dentry_unlink_inode+0x2bb/0x470 [ 2966.650950] __dentry_kill+0x36f/0x5c0 [ 2966.651775] ? dput+0x35/0xcd0 [ 2966.652448] dput+0x6f4/0xcd0 [ 2966.653138] do_renameat2+0x715/0xbf0 [ 2966.653948] ? __ia32_sys_link+0x80/0x80 [ 2966.654798] ? __virt_addr_valid+0x170/0x5d0 [ 2966.655733] ? __check_object_size+0x319/0x440 [ 2966.656714] __x64_sys_rename+0x7d/0xa0 [ 2966.657544] do_syscall_64+0x33/0x40 [ 2966.658326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2966.659401] RIP: 0033:0x7f10a04edb19 [ 2966.660191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2966.664046] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2966.665660] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2966.667157] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2966.668658] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2966.670152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2966.671633] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 17:26:47 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) 17:26:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f0000000680)={0x0, 0x6ea}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='tranfd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 2966.728559] 9pnet: Insufficient options for proto=fd [ 2966.787946] 9pnet: Insufficient options for proto=fd [ 2966.788901] 9pnet: Insufficient options for proto=fd 17:26:47 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), 0x0) 17:26:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 2966.984892] FAULT_INJECTION: forcing a failure. [ 2966.984892] name failslab, interval 1, probability 0, space 0, times 0 [ 2966.988977] CPU: 1 PID: 14729 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2966.990437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2966.992182] Call Trace: [ 2966.992736] dump_stack+0x107/0x167 [ 2966.993492] should_fail.cold+0x5/0xa [ 2966.994276] ? create_object.isra.0+0x3a/0xa30 [ 2966.995250] should_failslab+0x5/0x20 [ 2966.996071] kmem_cache_alloc+0x5b/0x310 [ 2966.996938] ? __kasan_slab_free+0x122/0x160 [ 2966.997885] create_object.isra.0+0x3a/0xa30 [ 2966.998807] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2966.999875] __kmalloc+0x16e/0x390 [ 2967.000617] ? __ext4_journal_start_sb+0x1db/0x390 [ 2967.001646] ext4_ext_remove_space+0x15af/0x3da0 [ 2967.002695] ? ext4_es_remove_extent+0x2f2/0x450 [ 2967.003703] ? do_raw_read_unlock+0x70/0x70 [ 2967.004605] ? ext4_da_release_space+0x21/0x480 [ 2967.005577] ? ext4_ext_index_trans_blocks+0x110/0x110 [ 2967.006692] ? ext4_es_lookup_extent+0xa80/0xa80 [ 2967.007683] ? down_write+0xe0/0x160 [ 2967.008455] ? down_write_killable+0x180/0x180 [ 2967.009409] ext4_ext_truncate+0x1ea/0x250 [ 2967.010302] ext4_truncate+0xc38/0x1160 [ 2967.011162] ? ext4_punch_hole+0x1070/0x1070 [ 2967.012095] ? __ext4_journal_start_sb+0x214/0x390 [ 2967.013134] ext4_evict_inode+0xae0/0x1a60 [ 2967.014036] ? ext4_da_write_begin+0xd40/0xd40 [ 2967.014990] ? rwlock_bug.part.0+0x90/0x90 [ 2967.015898] ? ext4_da_write_begin+0xd40/0xd40 [ 2967.016854] evict+0x32b/0x8c0 [ 2967.017530] ? new_inode+0x250/0x250 [ 2967.018310] ? lock_downgrade+0x6d0/0x6d0 [ 2967.019180] ? rwlock_bug.part.0+0x90/0x90 [ 2967.020066] ? fsnotify_grab_connector+0x11a/0x250 [ 2967.021108] iput.part.0+0x4b9/0x6d0 [ 2967.021890] ? trace_event_raw_event_ext4_es_lookup_extent_enter+0x300/0x300 [ 2967.023393] iput+0x58/0x70 [ 2967.024019] dentry_unlink_inode+0x2bb/0x470 [ 2967.024942] __dentry_kill+0x36f/0x5c0 [ 2967.025759] ? dput+0x35/0xcd0 [ 2967.026437] dput+0x6f4/0xcd0 [ 2967.027111] do_renameat2+0x715/0xbf0 [ 2967.027921] ? __ia32_sys_link+0x80/0x80 [ 2967.028788] ? __virt_addr_valid+0x170/0x5d0 [ 2967.029716] ? __check_object_size+0x319/0x440 [ 2967.030706] __x64_sys_rename+0x7d/0xa0 [ 2967.031546] do_syscall_64+0x33/0x40 [ 2967.032326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2967.033403] RIP: 0033:0x7f10a04edb19 [ 2967.034183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2967.038038] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2967.039658] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2967.041151] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2967.042653] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2967.044154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2967.045644] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 [ 2967.072795] 9pnet: Insufficient options for proto=fd 17:27:01 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 2) 17:27:01 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x60, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:27:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="010100000100000018000000409b", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:27:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmuteG\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:27:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x11) 17:27:01 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), 0x0) 17:27:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x14) 17:27:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 12) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 2980.334724] FAULT_INJECTION: forcing a failure. [ 2980.334724] name failslab, interval 1, probability 0, space 0, times 0 [ 2980.336474] CPU: 1 PID: 14749 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2980.337402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2980.338545] Call Trace: [ 2980.338912] dump_stack+0x107/0x167 [ 2980.339408] should_fail.cold+0x5/0xa [ 2980.340113] ? create_object.isra.0+0x3a/0xa30 [ 2980.340742] should_failslab+0x5/0x20 [ 2980.341255] kmem_cache_alloc+0x5b/0x310 [ 2980.341808] create_object.isra.0+0x3a/0xa30 [ 2980.342399] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2980.343073] kmem_cache_alloc+0x159/0x310 [ 2980.343657] ? jbd2_journal_put_journal_head+0x38a/0x560 [ 2980.344521] insert_revoke_hash+0x28/0x270 [ 2980.345087] jbd2_journal_revoke+0x2bb/0x570 [ 2980.345674] __ext4_forget+0x218/0x3e0 [ 2980.346194] ext4_free_blocks+0x194b/0x21f0 [ 2980.346777] ? ext4_mb_new_blocks+0x44b0/0x44b0 [ 2980.347424] ? ext4_ext_get_access.constprop.0.isra.0+0x80/0x80 [ 2980.348214] ? __ext4_journal_ensure_credits+0x263/0x2e0 [ 2980.348976] ext4_ext_remove_space+0x1ef7/0x3da0 [ 2980.349636] ? ext4_ext_index_trans_blocks+0x110/0x110 [ 2980.350333] ? ext4_es_lookup_extent+0xa80/0xa80 [ 2980.350962] ? down_write+0xe0/0x160 [ 2980.351462] ? down_write_killable+0x180/0x180 [ 2980.352070] ext4_ext_truncate+0x1ea/0x250 [ 2980.352629] ext4_truncate+0xc38/0x1160 [ 2980.353186] ? ext4_punch_hole+0x1070/0x1070 [ 2980.353773] ? __ext4_journal_start_sb+0x214/0x390 [ 2980.354425] ext4_evict_inode+0xae0/0x1a60 [ 2980.355027] ? ext4_da_write_begin+0xd40/0xd40 [ 2980.355639] ? rwlock_bug.part.0+0x90/0x90 [ 2980.356236] ? ext4_da_write_begin+0xd40/0xd40 [ 2980.356839] evict+0x32b/0x8c0 [ 2980.357265] ? new_inode+0x250/0x250 [ 2980.357760] ? lock_downgrade+0x6d0/0x6d0 [ 2980.358311] ? rwlock_bug.part.0+0x90/0x90 [ 2980.358871] ? fsnotify_grab_connector+0x11a/0x250 [ 2980.359542] iput.part.0+0x4b9/0x6d0 [ 2980.359630] FAULT_INJECTION: forcing a failure. [ 2980.359630] name failslab, interval 1, probability 0, space 0, times 0 [ 2980.360030] ? trace_event_raw_event_ext4_es_lookup_extent_enter+0x300/0x300 [ 2980.360051] iput+0x58/0x70 [ 2980.363724] dentry_unlink_inode+0x2bb/0x470 [ 2980.364306] __dentry_kill+0x36f/0x5c0 [ 2980.364814] ? dput+0x35/0xcd0 [ 2980.365238] dput+0x6f4/0xcd0 [ 2980.365653] do_renameat2+0x715/0xbf0 [ 2980.366160] ? __ia32_sys_link+0x80/0x80 [ 2980.366699] ? __virt_addr_valid+0x170/0x5d0 [ 2980.367289] ? __check_object_size+0x319/0x440 [ 2980.367911] __x64_sys_rename+0x7d/0xa0 [ 2980.368435] do_syscall_64+0x33/0x40 [ 2980.368947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2980.369626] RIP: 0033:0x7f10a04edb19 [ 2980.370120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2980.372526] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2980.373527] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2980.374459] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2980.375399] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2980.376332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2980.377262] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 [ 2980.378226] CPU: 0 PID: 14736 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 2980.379691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2980.381438] Call Trace: [ 2980.382010] dump_stack+0x107/0x167 [ 2980.382777] should_fail.cold+0x5/0xa [ 2980.383588] ? copy_process+0x3305/0x78b0 [ 2980.384471] should_failslab+0x5/0x20 [ 2980.385282] kmem_cache_alloc_node+0x55/0x330 [ 2980.386352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2980.387469] copy_process+0x3305/0x78b0 [ 2980.388303] ? mark_lock+0xf5/0x2df0 [ 2980.389092] ? lock_acquire+0x197/0x470 [ 2980.389925] ? find_held_lock+0x2c/0x110 [ 2980.390795] ? __cleanup_sighand+0xb0/0xb0 [ 2980.391706] ? _copy_from_user+0xfb/0x1b0 [ 2980.392579] kernel_clone+0xe7/0x980 [ 2980.393357] ? lock_acquire+0x197/0x470 [ 2980.394193] ? create_io_thread+0xf0/0xf0 [ 2980.395069] ? ksys_write+0x21a/0x260 [ 2980.395885] ? lock_downgrade+0x6d0/0x6d0 [ 2980.396753] __do_sys_clone3+0x1e5/0x320 [ 2980.397609] ? __do_sys_clone+0x110/0x110 [ 2980.398496] ? rcu_read_lock_any_held+0x75/0xa0 [ 2980.399487] ? vfs_write+0x354/0xb10 [ 2980.400269] ? fput_many+0x2f/0x1a0 [ 2980.401021] ? ksys_write+0x1a9/0x260 [ 2980.401818] ? __ia32_sys_read+0xb0/0xb0 [ 2980.402679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2980.403810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2980.404893] ? trace_hardirqs_on+0x5b/0x180 [ 2980.405803] do_syscall_64+0x33/0x40 [ 2980.406588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2980.407666] RIP: 0033:0x7f7b970cfb19 [ 2980.408446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2980.412288] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2980.413886] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 2980.415386] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2980.416899] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2980.418389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2980.419896] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 [ 2980.431502] 9pnet: Insufficient options for proto=fd [ 2980.434028] 9pnet: Insufficient options for proto=fd [ 2980.438727] 9pnet: Insufficient options for proto=fd 17:27:01 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), 0x0) 17:27:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 13) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 2980.510145] 9pnet: Insufficient options for proto=fd [ 2980.513990] 9pnet: Insufficient options for proto=fd [ 2980.585350] FAULT_INJECTION: forcing a failure. [ 2980.585350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2980.587226] CPU: 1 PID: 14765 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 2980.588114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2980.589120] Call Trace: [ 2980.589464] dump_stack+0x107/0x167 [ 2980.589907] should_fail.cold+0x5/0xa [ 2980.590370] _copy_from_user+0x2e/0x1b0 [ 2980.590853] io_uring_setup+0x9b/0x2980 [ 2980.591339] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2980.591916] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2980.592516] ? wait_for_completion_io+0x270/0x270 [ 2980.593094] ? rcu_read_lock_any_held+0x75/0xa0 [ 2980.593644] ? vfs_write+0x354/0xb10 [ 2980.594098] ? fput_many+0x2f/0x1a0 [ 2980.594530] ? ksys_write+0x1a9/0x260 [ 2980.594982] ? __ia32_sys_read+0xb0/0xb0 [ 2980.595535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2980.596265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2980.596957] do_syscall_64+0x33/0x40 [ 2980.597435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2980.598222] RIP: 0033:0x7f15cb12cb19 [ 2980.598747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2980.601359] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2980.602542] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 2980.603400] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 2980.604391] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 2980.605240] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 2980.606097] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:27:01 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 1) [ 2980.611916] FAULT_INJECTION: forcing a failure. [ 2980.611916] name failslab, interval 1, probability 0, space 0, times 0 [ 2980.613417] CPU: 1 PID: 14763 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2980.614242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2980.615232] Call Trace: [ 2980.615546] dump_stack+0x107/0x167 [ 2980.615981] should_fail.cold+0x5/0xa [ 2980.616438] ? create_object.isra.0+0x3a/0xa30 [ 2980.616980] should_failslab+0x5/0x20 [ 2980.617433] kmem_cache_alloc+0x5b/0x310 [ 2980.617917] ? pagecache_get_page+0x243/0xc80 [ 2980.618452] create_object.isra.0+0x3a/0xa30 [ 2980.618975] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2980.619587] kmem_cache_alloc+0x159/0x310 [ 2980.620087] ext4_free_blocks+0x10ef/0x21f0 [ 2980.620608] ? ext4_mb_new_blocks+0x44b0/0x44b0 [ 2980.621173] ? __ext4_journal_ensure_credits+0x263/0x2e0 [ 2980.621819] ext4_ext_remove_space+0x1ef7/0x3da0 [ 2980.622410] ? ext4_ext_index_trans_blocks+0x110/0x110 [ 2980.623040] ? ext4_es_lookup_extent+0xa80/0xa80 [ 2980.623604] ? down_write+0xe0/0x160 [ 2980.624042] ? down_write_killable+0x180/0x180 [ 2980.624582] ext4_ext_truncate+0x1ea/0x250 17:27:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmapH^name=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smqckfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 2980.625086] ext4_truncate+0xc38/0x1160 [ 2980.625685] ? ext4_punch_hole+0x1070/0x1070 [ 2980.626247] ? __ext4_journal_start_sb+0x214/0x390 [ 2980.626828] ext4_evict_inode+0xae0/0x1a60 [ 2980.627338] ? ext4_da_write_begin+0xd40/0xd40 [ 2980.627872] ? rwlock_bug.part.0+0x90/0x90 [ 2980.628377] ? ext4_da_write_begin+0xd40/0xd40 [ 2980.628913] evict+0x32b/0x8c0 [ 2980.629296] ? new_inode+0x250/0x250 [ 2980.629732] ? lock_downgrade+0x6d0/0x6d0 [ 2980.630221] ? rwlock_bug.part.0+0x90/0x90 [ 2980.630715] ? fsnotify_grab_connector+0x11a/0x250 [ 2980.631307] iput.part.0+0x4b9/0x6d0 [ 2980.631748] ? trace_event_raw_event_ext4_es_lookup_extent_enter+0x300/0x300 [ 2980.632580] iput+0x58/0x70 [ 2980.632932] dentry_unlink_inode+0x2bb/0x470 [ 2980.633448] __dentry_kill+0x36f/0x5c0 [ 2980.633909] ? dput+0x35/0xcd0 [ 2980.634286] dput+0x6f4/0xcd0 [ 2980.634659] do_renameat2+0x715/0xbf0 [ 2980.635114] ? __ia32_sys_link+0x80/0x80 [ 2980.635612] ? __virt_addr_valid+0x170/0x5d0 [ 2980.636132] ? __check_object_size+0x319/0x440 [ 2980.636686] __x64_sys_rename+0x7d/0xa0 [ 2980.637157] do_syscall_64+0x33/0x40 [ 2980.637594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2980.638193] RIP: 0033:0x7f10a04edb19 [ 2980.638628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2980.640774] RSP: 002b:00007f109da63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2980.641668] RAX: ffffffffffffffda RBX: 00007f10a0600f60 RCX: 00007f10a04edb19 [ 2980.642652] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000020000180 [ 2980.643489] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2980.644328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2980.645160] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 17:27:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) rmdir(&(0x7f0000000600)='./file0\x00') syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r10}}, 0x1) [ 2980.755053] 9pnet: Insufficient options for proto=fd [ 2980.758420] 9pnet: Insufficient options for proto=fd 17:27:01 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 2) [ 2980.768179] FAULT_INJECTION: forcing a failure. [ 2980.768179] name failslab, interval 1, probability 0, space 0, times 0 [ 2980.769520] CPU: 1 PID: 14774 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 2980.770291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2980.771212] Call Trace: [ 2980.771512] dump_stack+0x107/0x167 [ 2980.771922] should_fail.cold+0x5/0xa [ 2980.772349] ? io_uring_setup+0x258/0x2980 [ 2980.772820] should_failslab+0x5/0x20 [ 2980.773238] kmem_cache_alloc_trace+0x55/0x320 [ 2980.773740] io_uring_setup+0x258/0x2980 [ 2980.774186] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2980.774712] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2980.775280] ? wait_for_completion_io+0x270/0x270 [ 2980.775823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2980.776398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2980.776960] do_syscall_64+0x33/0x40 [ 2980.777373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2980.777942] RIP: 0033:0x7f15cb12cb19 [ 2980.778354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2980.780355] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2980.781176] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 2980.781949] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 2980.782718] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 2980.783494] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 2980.784265] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:27:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') (fail_nth: 14) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 2980.817536] 9pnet: Insufficient options for proto=fd [ 2980.825482] FAULT_INJECTION: forcing a failure. [ 2980.825482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2980.826822] CPU: 1 PID: 14777 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 2980.827572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2980.828467] Call Trace: [ 2980.828753] dump_stack+0x107/0x167 [ 2980.829147] should_fail.cold+0x5/0xa [ 2980.829560] _copy_to_user+0x2e/0x180 [ 2980.829972] simple_read_from_buffer+0xcc/0x160 [ 2980.830480] proc_fail_nth_read+0x198/0x230 [ 2980.830943] ? proc_sessionid_read+0x230/0x230 [ 2980.831439] ? security_file_permission+0xb1/0xe0 [ 2980.831959] ? proc_sessionid_read+0x230/0x230 [ 2980.832446] vfs_read+0x228/0x620 [ 2980.832817] ksys_read+0x12d/0x260 [ 2980.833196] ? vfs_write+0xb10/0xb10 [ 2980.833598] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2980.834159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2980.834710] do_syscall_64+0x33/0x40 [ 2980.835110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2980.835666] RIP: 0033:0x7f10a04a069c [ 2980.836066] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2980.838022] RSP: 002b:00007f109da63170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2980.838835] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a04a069c [ 2980.839602] RDX: 000000000000000f RSI: 00007f109da631e0 RDI: 0000000000000004 [ 2980.840362] RBP: 00007f109da631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2980.841121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2980.841880] R13: 00007fffccf6c1ff R14: 00007f109da63300 R15: 0000000000022000 17:27:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x12) 17:27:16 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 3) 17:27:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0xfff, 0x101}, 0x50008, 0x0, 0x1fc, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="014500000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6e6f6465766d61702c616e616d653d002c6e6f6465766d61702c76657273696f6e3d3970323030302e752c636f6e746578743d756e636f6e66696e65645f752c736d610080000000000000736d7574653d002c00"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) unlinkat(r2, &(0x7f0000000600)='./file0\x00', 0x0) 17:27:16 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 3) 17:27:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x15) 17:27:16 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x68, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:27:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:27:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000149596b53b5e648fc8d9575015b0d1f7a5b39b154842cd8a051e0295e35660dc78eda85f536b23af543cfd4c096bfc4f083c5f2a06965ec27d2b93243219b60e0cfe55b749a889bb9766fb53a0c44580718545443b80a513d8ce931b3c04413c57a7661ee346702a69bc241017d7ef1ea4b83db91eddd4c12b65c0f1c6e3c445e0f6a52ed2dfbf589d8de5bd873483f3abe3ea546509864b3c51c979353e8303955570715e2f8e7309ec9551ce0bd8941b9f23d9df811a83950ddb58edf60714a5", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000480)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x5) 17:27:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x13) [ 2995.371490] 9pnet: Insufficient options for proto=fd [ 2995.396230] FAULT_INJECTION: forcing a failure. [ 2995.396230] name failslab, interval 1, probability 0, space 0, times 0 [ 2995.398763] CPU: 1 PID: 14805 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 2995.400240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.402000] Call Trace: [ 2995.402559] dump_stack+0x107/0x167 [ 2995.403334] should_fail.cold+0x5/0xa [ 2995.404176] ? create_object.isra.0+0x3a/0xa30 [ 2995.404811] 9pnet: Insufficient options for proto=fd [ 2995.405150] should_failslab+0x5/0x20 [ 2995.405170] kmem_cache_alloc+0x5b/0x310 [ 2995.405194] create_object.isra.0+0x3a/0xa30 [ 2995.405209] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2995.405234] kmem_cache_alloc_trace+0x151/0x320 [ 2995.405260] io_uring_setup+0x258/0x2980 [ 2995.405280] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2995.405302] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2995.405322] ? wait_for_completion_io+0x270/0x270 [ 2995.412870] 9pnet: Insufficient options for proto=fd [ 2995.413502] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2995.413523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2995.413544] do_syscall_64+0x33/0x40 [ 2995.413564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2995.413577] RIP: 0033:0x7f15cb12cb19 [ 2995.413600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.423949] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2995.425551] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 2995.427055] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 2995.428565] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 2995.430061] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 2995.431697] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 2995.439013] FAULT_INJECTION: forcing a failure. [ 2995.439013] name failslab, interval 1, probability 0, space 0, times 0 [ 2995.440856] CPU: 0 PID: 14803 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 2995.441917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.443067] Call Trace: [ 2995.443453] dump_stack+0x107/0x167 [ 2995.443961] should_fail.cold+0x5/0xa [ 2995.444493] ? create_object.isra.0+0x3a/0xa30 [ 2995.445137] should_failslab+0x5/0x20 [ 2995.445672] kmem_cache_alloc+0x5b/0x310 [ 2995.446247] create_object.isra.0+0x3a/0xa30 [ 2995.446864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2995.447580] kmem_cache_alloc_node+0x169/0x330 [ 2995.448236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2995.448962] copy_process+0x3305/0x78b0 [ 2995.449523] ? mark_lock+0xf5/0x2df0 [ 2995.450054] ? lock_acquire+0x197/0x470 [ 2995.450606] ? find_held_lock+0x2c/0x110 [ 2995.451174] ? __cleanup_sighand+0xb0/0xb0 [ 2995.451780] ? _copy_from_user+0xfb/0x1b0 [ 2995.452364] kernel_clone+0xe7/0x980 [ 2995.452889] ? lock_acquire+0x197/0x470 [ 2995.453448] ? create_io_thread+0xf0/0xf0 [ 2995.454036] ? ksys_write+0x21a/0x260 [ 2995.454570] ? lock_downgrade+0x6d0/0x6d0 [ 2995.455141] __do_sys_clone3+0x1e5/0x320 [ 2995.455710] ? __do_sys_clone+0x110/0x110 [ 2995.456315] ? rcu_read_lock_any_held+0x75/0xa0 [ 2995.456968] ? vfs_write+0x354/0xb10 [ 2995.457497] ? fput_many+0x2f/0x1a0 [ 2995.458022] ? ksys_write+0x1a9/0x260 [ 2995.458558] ? __ia32_sys_read+0xb0/0xb0 [ 2995.459134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2995.459878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2995.460594] ? trace_hardirqs_on+0x5b/0x180 [ 2995.461212] do_syscall_64+0x33/0x40 [ 2995.461738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2995.462476] RIP: 0033:0x7f7b970cfb19 [ 2995.462997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.465582] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2995.466651] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 2995.467675] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2995.468674] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2995.469684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2995.470686] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 [ 2995.484876] 9pnet: Insufficient options for proto=fd 17:27:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="020000007e5ae745000000006d6e9a5f98ed577279707465645f64697200e3bde3c9ce5b013e9f8be9f276afaf5d19e69cf7c5f79080c1825a293ed04295ea057ec74e7d1d4c6ebc1233dc45c51ab988ce0c0745bfe0dc7fa86033d0bed5d5426fe180ca78db75700b84424d7becc5bffd1ba1f48079bca11a732e1f4efd5d56b8131f7561280d127b"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x200000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000006c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f0000000680)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x3, 0x7ffe, 0x0, 0xffff, 0x0, 0x1}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x1, 0x0, 0x10001, 0x5}, 0x7) [ 2995.514310] 9pnet: Insufficient options for proto=fd 17:27:16 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 4) [ 2995.572883] 9pnet: Insufficient options for proto=fd [ 2995.604842] FAULT_INJECTION: forcing a failure. [ 2995.604842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2995.606511] CPU: 0 PID: 14816 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 2995.607437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.608531] Call Trace: [ 2995.608883] dump_stack+0x107/0x167 [ 2995.609371] should_fail.cold+0x5/0xa [ 2995.609880] __alloc_pages_nodemask+0x182/0x600 [ 2995.610504] ? lock_release+0x680/0x680 [ 2995.611024] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2995.611841] ? lock_downgrade+0x6d0/0x6d0 [ 2995.612396] alloc_pages_current+0x187/0x280 [ 2995.612972] kmalloc_order+0x35/0x160 [ 2995.613477] kmalloc_order_trace+0x14/0xa0 [ 2995.614038] io_uring_setup+0x33c/0x2980 [ 2995.614581] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2995.615221] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2995.615881] ? wait_for_completion_io+0x270/0x270 [ 2995.616528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2995.617212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2995.617892] do_syscall_64+0x33/0x40 [ 2995.618380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2995.619061] RIP: 0033:0x7f15cb12cb19 [ 2995.619569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.621993] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2995.623013] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 2995.623966] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 2995.624900] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 2995.625837] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 2995.626763] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:27:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x1}}, 'mnt/encrypted_dir\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x81, 0x9, 0x8, 0x0, 0x4, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x7, @perf_bp={&(0x7f0000000600), 0x6}, 0x225, 0x8, 0x10000, 0x5, 0x8d00, 0x1, 0xdfc, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x10, r1, 0x459eeddd075bac69) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r8, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r10}}, 0x1) 17:27:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = fork() process_vm_writev(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x3f, 0x3f, 0x99, 0x7, 0x0, 0x7, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x400080000000, 0x20}, 0x8300, 0x7, 0x7d, 0x7, 0x2, 0x10000, 0x6, 0x0, 0x8001, 0x0, 0x2}, r7, 0x0, 0xffffffffffffffff, 0x1) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) [ 2995.669018] 9pnet: Insufficient options for proto=fd [ 2995.703337] 9pnet: Insufficient options for proto=fd 17:27:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279700065645f64697200d3c1ef6fbb12312fe29f5dea58d843ad3e6b3a7e54806b84629d02"]) r2 = syz_io_uring_setup(0x5f1c, &(0x7f00000001c0)={0x0, 0xfffffffb, 0x0, 0x2, 0xfffffffc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f01000000ab32868308c76cb9681d124b4d26f852cfac38eb21d31a68a03749a3d44668d09aa55fc22428cae9412aa0393cce433fd453e17295cf9f3479dcd5b629f9db1246073bce4b74ac25f36c7148f8f6a6d90f81d8b47c9f1c92a653e5c050f817ca7ff821fef88a409e008c86001f1317"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000600)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)=@v1={0x2, "3413a3de54175a7e75dba2bf68a61925"}, 0x11, 0x1) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 2995.767452] 9pnet: Insufficient options for proto=fd 17:27:16 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 5) [ 2995.807332] 9pnet: Insufficient options for proto=fd 17:27:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x14) 17:27:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x16) [ 2995.820627] 9pnet: Insufficient options for proto=fd [ 2995.827038] FAULT_INJECTION: forcing a failure. [ 2995.827038] name failslab, interval 1, probability 0, space 0, times 0 [ 2995.828394] CPU: 0 PID: 14833 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 2995.829211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.830185] Call Trace: [ 2995.830499] dump_stack+0x107/0x167 [ 2995.830933] should_fail.cold+0x5/0xa [ 2995.831385] ? create_object.isra.0+0x3a/0xa30 [ 2995.831923] should_failslab+0x5/0x20 [ 2995.832368] kmem_cache_alloc+0x5b/0x310 [ 2995.832845] create_object.isra.0+0x3a/0xa30 [ 2995.833366] ? kasan_unpoison_shadow+0x33/0x50 [ 2995.833903] kmalloc_order+0xfe/0x160 [ 2995.834358] kmalloc_order_trace+0x14/0xa0 [ 2995.834859] io_uring_setup+0x33c/0x2980 [ 2995.835339] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2995.835587] 9pnet: Insufficient options for proto=fd [ 2995.835919] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2995.837613] ? wait_for_completion_io+0x270/0x270 [ 2995.838192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2995.838809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2995.839432] do_syscall_64+0x33/0x40 [ 2995.839871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2995.840476] RIP: 0033:0x7f15cb12cb19 [ 2995.840916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.843056] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2995.843956] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 2995.844786] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 2995.845613] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 2995.846443] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 2995.847272] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 2995.883331] 9pnet: Insufficient options for proto=fd 17:27:16 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 4) [ 2995.991555] FAULT_INJECTION: forcing a failure. [ 2995.991555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2995.994659] CPU: 1 PID: 14844 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 2995.996168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.997934] Call Trace: [ 2995.998505] dump_stack+0x107/0x167 [ 2995.999282] should_fail.cold+0x5/0xa [ 2996.000106] __alloc_pages_nodemask+0x182/0x600 [ 2996.001107] ? lock_downgrade+0x6d0/0x6d0 [ 2996.001993] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2996.003267] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2996.004404] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2996.005406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2996.006526] copy_process+0x62b/0x78b0 [ 2996.007371] ? mark_lock+0xf5/0x2df0 [ 2996.008176] ? lock_acquire+0x197/0x470 [ 2996.009023] ? find_held_lock+0x2c/0x110 [ 2996.009906] ? __cleanup_sighand+0xb0/0xb0 [ 2996.010820] ? _copy_from_user+0xfb/0x1b0 [ 2996.011714] kernel_clone+0xe7/0x980 [ 2996.012509] ? lock_acquire+0x197/0x470 [ 2996.013358] ? create_io_thread+0xf0/0xf0 [ 2996.014259] ? ksys_write+0x21a/0x260 [ 2996.015079] ? lock_downgrade+0x6d0/0x6d0 [ 2996.015971] __do_sys_clone3+0x1e5/0x320 [ 2996.016833] ? __do_sys_clone+0x110/0x110 [ 2996.017731] ? rcu_read_lock_any_held+0x75/0xa0 [ 2996.018728] ? vfs_write+0x354/0xb10 [ 2996.019537] ? fput_many+0x2f/0x1a0 [ 2996.020302] ? ksys_write+0x1a9/0x260 [ 2996.021110] ? __ia32_sys_read+0xb0/0xb0 [ 2996.021983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2996.023102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2996.024205] ? trace_hardirqs_on+0x5b/0x180 [ 2996.025127] do_syscall_64+0x33/0x40 [ 2996.025911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2996.027006] RIP: 0033:0x7f7b970cfb19 [ 2996.027806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2996.031752] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2996.033381] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 2996.034908] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2996.036441] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 2996.037975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2996.039506] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 17:27:30 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 5) 17:27:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x200, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="010800c6c0bd05037f00000018000010", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB='Y=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) creat(&(0x7f0000000240)='./mnt\x00', 0x48) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_mount_image$nfs4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0xa21, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000680)="8a0f699db00bab2d3518d99b2819f7b6ea83379f8f3382caeee88e8995827aae5a2b6f8b7a94f1cb4a0d4575b75d7e1d1f08355e62af4e124d7d9d4d769d053bf8bf453ba21eb54481e8fdeb5fd58e2ecda0864cbc32f37339c8feaab4a8b53e41619b5df5", 0x65, 0x7fff}], 0x1c080, &(0x7f0000000940)={[{'9p\x00'}, {'9p\x00'}, {'+)$$}({&'}, {'9p\x00'}, {}, {'[!)'}, {'(@'}], [{@fowner_eq}, {@hash}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}) readlinkat(r7, &(0x7f0000000700)='./mnt\x00', &(0x7f0000001100)=""/4096, 0x1000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0xa286}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) 17:27:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x17) 17:27:30 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 6) 17:27:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="000000001b00000000000000", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:27:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) r3 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000005c6e742f656e637279707465645f64697200"]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x400}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r10, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x1) 17:27:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x15) 17:27:30 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x6c, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3010.004065] FAULT_INJECTION: forcing a failure. [ 3010.004065] name failslab, interval 1, probability 0, space 0, times 0 [ 3010.006588] CPU: 1 PID: 14851 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 3010.007918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3010.009747] Call Trace: [ 3010.010266] dump_stack+0x107/0x167 [ 3010.010962] should_fail.cold+0x5/0xa [ 3010.011701] ? prepare_creds+0x25/0x5e0 [ 3010.012457] should_failslab+0x5/0x20 [ 3010.013182] kmem_cache_alloc+0x5b/0x310 [ 3010.013969] ? lock_downgrade+0x6d0/0x6d0 [ 3010.014765] prepare_creds+0x25/0x5e0 [ 3010.015496] copy_creds+0x72/0x580 [ 3010.016192] copy_process+0xfef/0x78b0 [ 3010.016932] ? mark_lock+0xf5/0x2df0 [ 3010.017650] ? lock_acquire+0x197/0x470 [ 3010.018453] ? find_held_lock+0x2c/0x110 [ 3010.019330] ? __cleanup_sighand+0xb0/0xb0 [ 3010.020388] ? _copy_from_user+0xfb/0x1b0 [ 3010.021249] kernel_clone+0xe7/0x980 [ 3010.022095] ? lock_acquire+0x197/0x470 [ 3010.022836] ? create_io_thread+0xf0/0xf0 [ 3010.023635] ? ksys_write+0x21a/0x260 [ 3010.024355] ? lock_downgrade+0x6d0/0x6d0 [ 3010.025135] __do_sys_clone3+0x1e5/0x320 [ 3010.025886] ? __do_sys_clone+0x110/0x110 [ 3010.026683] ? rcu_read_lock_any_held+0x75/0xa0 [ 3010.027562] ? vfs_write+0x354/0xb10 [ 3010.028266] ? fput_many+0x2f/0x1a0 [ 3010.028941] ? ksys_write+0x1a9/0x260 [ 3010.029840] ? __ia32_sys_read+0xb0/0xb0 [ 3010.030711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3010.031880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3010.033032] ? trace_hardirqs_on+0x5b/0x180 [ 3010.033886] do_syscall_64+0x33/0x40 [ 3010.034747] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3010.035924] RIP: 0033:0x7f7b970cfb19 [ 3010.036671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3010.040743] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3010.042310] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 3010.043798] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 3010.045439] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 3010.046763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3010.048259] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 [ 3010.069347] FAULT_INJECTION: forcing a failure. [ 3010.069347] name failslab, interval 1, probability 0, space 0, times 0 [ 3010.071783] CPU: 0 PID: 14865 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3010.073370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3010.075111] Call Trace: [ 3010.075682] dump_stack+0x107/0x167 [ 3010.076460] should_fail.cold+0x5/0xa [ 3010.077266] ? io_uring_setup+0x40b/0x2980 [ 3010.078149] should_failslab+0x5/0x20 [ 3010.078946] kmem_cache_alloc_trace+0x55/0x320 [ 3010.079940] io_uring_setup+0x40b/0x2980 [ 3010.080803] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3010.081812] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3010.082872] ? wait_for_completion_io+0x270/0x270 [ 3010.083915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3010.085018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3010.086104] do_syscall_64+0x33/0x40 [ 3010.086896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3010.087979] RIP: 0033:0x7f15cb12cb19 [ 3010.088754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3010.092615] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3010.094223] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3010.095722] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3010.097201] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3010.098678] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3010.100171] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3010.108611] 9pnet: Insufficient options for proto=fd 17:27:30 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 7) [ 3010.163885] 9pnet: Insufficient options for proto=fd [ 3010.172565] 9pnet: Insufficient options for proto=fd [ 3010.183023] FAULT_INJECTION: forcing a failure. [ 3010.183023] name failslab, interval 1, probability 0, space 0, times 0 [ 3010.185675] CPU: 0 PID: 14869 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3010.187248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3010.188994] Call Trace: [ 3010.189555] dump_stack+0x107/0x167 [ 3010.190322] should_fail.cold+0x5/0xa [ 3010.191125] ? create_object.isra.0+0x3a/0xa30 [ 3010.192084] should_failslab+0x5/0x20 [ 3010.192884] kmem_cache_alloc+0x5b/0x310 [ 3010.193732] create_object.isra.0+0x3a/0xa30 [ 3010.194647] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3010.195716] kmem_cache_alloc_trace+0x151/0x320 [ 3010.196689] io_uring_setup+0x40b/0x2980 [ 3010.197537] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3010.198553] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3010.199627] ? wait_for_completion_io+0x270/0x270 [ 3010.200661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3010.201761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3010.202839] do_syscall_64+0x33/0x40 [ 3010.203622] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3010.204689] RIP: 0033:0x7f15cb12cb19 [ 3010.205463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3010.209328] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3010.210913] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3010.212415] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3010.213913] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3010.215432] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3010.216940] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3010.225573] 9pnet: Insufficient options for proto=fd [ 3010.237349] loop3: detected capacity change from 0 to 65024 [ 3010.244287] nfs4: Unknown parameter '9p' [ 3010.264004] 9pnet: Insufficient options for proto=fd 17:27:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3010.338267] 9pnet: Insufficient options for proto=fd 17:27:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x16) 17:27:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x1eb1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2007, @fd_index=0x7, 0x4, 0x0, 0x0, 0x1a, 0x1, {0x2}}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3010.425656] 9pnet: Insufficient options for proto=fd 17:27:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x100, 0x0, 0x4000, 0x2d9}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 3010.470573] 9pnet: Insufficient options for proto=fd [ 3010.472640] 9pnet: Insufficient options for proto=fd [ 3010.503875] 9pnet: Insufficient options for proto=fd 17:27:31 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 8) 17:27:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x18) [ 3010.548430] FAULT_INJECTION: forcing a failure. [ 3010.548430] name failslab, interval 1, probability 0, space 0, times 0 [ 3010.551163] CPU: 0 PID: 14893 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3010.552672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3010.554544] Call Trace: [ 3010.555116] dump_stack+0x107/0x167 [ 3010.555924] should_fail.cold+0x5/0xa [ 3010.556762] ? create_object.isra.0+0x3a/0xa30 [ 3010.557754] should_failslab+0x5/0x20 17:27:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x301, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000010006d6e742f6564637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) open$dir(&(0x7f0000000600)='./file0\x00', 0x80, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3010.558576] kmem_cache_alloc+0x5b/0x310 [ 3010.559563] create_object.isra.0+0x3a/0xa30 [ 3010.560502] kmemleak_alloc_percpu+0xa0/0x100 [ 3010.561440] pcpu_alloc+0x4e2/0x1240 [ 3010.562231] ? io_tctx_exit_cb+0xf0/0xf0 [ 3010.563084] percpu_ref_init+0x31/0x3d0 [ 3010.563941] io_uring_setup+0x47a/0x2980 [ 3010.564791] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3010.565811] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3010.566873] ? wait_for_completion_io+0x270/0x270 [ 3010.567382] 9pnet: Insufficient options for proto=fd [ 3010.567920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3010.567947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3010.570822] do_syscall_64+0x33/0x40 [ 3010.571615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3010.572696] RIP: 0033:0x7f15cb12cb19 [ 3010.572715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3010.572725] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3010.572752] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3010.580174] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3010.581676] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3010.583179] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3010.584676] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3010.643660] 9pnet: Insufficient options for proto=fd 17:27:31 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 6) 17:27:31 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x74, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:27:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='mnt/encrypted_dir\x00', 0x165) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6e6f6465766d61702c616e616d653d002c6e6f6465766d61702c76657273696f6e3d397032ffff302e755f2d252c636f6e746578743d756e636f6e66696e65645f2c736d61636b66737472616e736d7574897b64e7d70038"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x3f6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3010.681479] 9pnet: Insufficient options for proto=fd [ 3010.689472] 9pnet: Insufficient options for proto=fd [ 3010.701691] FAULT_INJECTION: forcing a failure. [ 3010.701691] name failslab, interval 1, probability 0, space 0, times 0 [ 3010.703520] CPU: 1 PID: 14904 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 3010.704432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3010.705796] Call Trace: [ 3010.706146] dump_stack+0x107/0x167 [ 3010.706693] should_fail.cold+0x5/0xa [ 3010.707311] ? create_object.isra.0+0x3a/0xa30 [ 3010.707903] should_failslab+0x5/0x20 [ 3010.708392] kmem_cache_alloc+0x5b/0x310 [ 3010.708920] create_object.isra.0+0x3a/0xa30 [ 3010.709486] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3010.710281] kmem_cache_alloc+0x159/0x310 [ 3010.710831] prepare_creds+0x25/0x5e0 [ 3010.711318] copy_creds+0x72/0x580 [ 3010.711789] copy_process+0xfef/0x78b0 [ 3010.712294] ? mark_lock+0xf5/0x2df0 [ 3010.712769] ? lock_acquire+0x197/0x470 [ 3010.713410] ? find_held_lock+0x2c/0x110 [ 3010.714091] ? __cleanup_sighand+0xb0/0xb0 [ 3010.714668] ? _copy_from_user+0xfb/0x1b0 [ 3010.715284] kernel_clone+0xe7/0x980 [ 3010.715828] ? lock_acquire+0x197/0x470 [ 3010.716437] ? create_io_thread+0xf0/0xf0 [ 3010.717048] ? ksys_write+0x21a/0x260 [ 3010.717663] ? lock_downgrade+0x6d0/0x6d0 [ 3010.718263] __do_sys_clone3+0x1e5/0x320 [ 3010.718773] ? __do_sys_clone+0x110/0x110 [ 3010.719484] ? rcu_read_lock_any_held+0x75/0xa0 [ 3010.720091] ? vfs_write+0x354/0xb10 [ 3010.720733] ? fput_many+0x2f/0x1a0 [ 3010.721293] ? ksys_write+0x1a9/0x260 [ 3010.721920] ? __ia32_sys_read+0xb0/0xb0 [ 3010.722549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3010.723359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3010.724020] ? trace_hardirqs_on+0x5b/0x180 [ 3010.724739] do_syscall_64+0x33/0x40 [ 3010.725242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3010.726174] RIP: 0033:0x7f7b970cfb19 [ 3010.726647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3010.729375] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3010.730579] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 3010.731658] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 3010.732569] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 3010.733461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3010.734355] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 [ 3010.767619] 9pnet: Insufficient options for proto=fd 17:27:31 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 9) 17:27:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4004, @fd=r2, 0x5, 0x0, 0x0, 0x18, 0x1}, 0xfffffe00) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 3010.814941] 9pnet: Insufficient options for proto=fd [ 3010.839892] FAULT_INJECTION: forcing a failure. [ 3010.839892] name failslab, interval 1, probability 0, space 0, times 0 [ 3010.841321] CPU: 1 PID: 14913 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3010.842157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3010.843163] Call Trace: [ 3010.843488] dump_stack+0x107/0x167 [ 3010.843940] should_fail.cold+0x5/0xa [ 3010.844404] ? create_object.isra.0+0x3a/0xa30 [ 3010.844961] should_failslab+0x5/0x20 [ 3010.845418] kmem_cache_alloc+0x5b/0x310 [ 3010.845904] create_object.isra.0+0x3a/0xa30 [ 3010.846432] kmemleak_alloc_percpu+0xa0/0x100 [ 3010.846978] pcpu_alloc+0x4e2/0x1240 [ 3010.847434] ? io_tctx_exit_cb+0xf0/0xf0 [ 3010.847929] percpu_ref_init+0x31/0x3d0 [ 3010.848411] io_uring_setup+0x47a/0x2980 [ 3010.848906] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3010.849483] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3010.850086] ? wait_for_completion_io+0x270/0x270 [ 3010.850676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3010.851309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3010.851933] do_syscall_64+0x33/0x40 [ 3010.852381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3010.852992] RIP: 0033:0x7f15cb12cb19 [ 3010.853436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3010.855661] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3010.856560] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3010.857408] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3010.858252] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3010.859098] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3010.859951] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3010.866485] 9pnet: Insufficient options for proto=fd [ 3010.876454] 9pnet: Insufficient options for proto=fd 17:27:44 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x7a, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:27:44 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 7) 17:27:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x17) 17:27:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x19) 17:27:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x3178008, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000800000000006d6ebd612e27dc7430a53625825df42f036e"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) umount2(&(0x7f0000000600)='./mnt\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x6b8f, &(0x7f00000002c0)={0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:27:44 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x1c8, &(0x7f00000001c0)={0x0, 0xb370, 0x4, 0x0, 0x13f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x1}}, 'mnt/encrypted_dir\x00'}) openat(r0, &(0x7f0000000600)='./file0\x00', 0x400100, 0x173) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) 17:27:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000640)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f0000000680)={0x0, 0x6be8, 0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000400000126d6e742f656e637279707465645f65697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000ab7973bc00", @ANYRES32=r0, @ANYBLOB="0000000000f4ab7499d1cac7c200"]) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x4000000c}}, 0x801) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x1) 17:27:44 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 10) [ 3023.968196] FAULT_INJECTION: forcing a failure. [ 3023.968196] name failslab, interval 1, probability 0, space 0, times 0 [ 3023.970834] CPU: 1 PID: 14940 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3023.972356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3023.974384] Call Trace: [ 3023.974975] dump_stack+0x107/0x167 [ 3023.975834] should_fail.cold+0x5/0xa [ 3023.976688] ? percpu_ref_init+0xd8/0x3d0 [ 3023.977754] should_failslab+0x5/0x20 [ 3023.978795] kmem_cache_alloc_trace+0x55/0x320 [ 3023.979859] ? io_tctx_exit_cb+0xf0/0xf0 [ 3023.980866] percpu_ref_init+0xd8/0x3d0 [ 3023.981758] io_uring_setup+0x47a/0x2980 [ 3023.982801] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3023.984021] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3023.985096] ? wait_for_completion_io+0x270/0x270 [ 3023.986349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3023.987702] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3023.989146] do_syscall_64+0x33/0x40 [ 3023.989937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3023.991184] RIP: 0033:0x7f15cb12cb19 [ 3023.992211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3023.997009] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3023.998895] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3024.000410] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3024.001913] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3024.003419] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3024.004939] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3024.015823] FAULT_INJECTION: forcing a failure. [ 3024.015823] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.018470] CPU: 1 PID: 14939 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 3024.020101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3024.022260] Call Trace: [ 3024.022931] dump_stack+0x107/0x167 [ 3024.023937] should_fail.cold+0x5/0xa [ 3024.024994] ? security_prepare_creds+0x112/0x190 [ 3024.026603] should_failslab+0x5/0x20 [ 3024.027916] __kmalloc+0x72/0x390 [ 3024.028856] security_prepare_creds+0x112/0x190 [ 3024.030137] prepare_creds+0x452/0x5e0 [ 3024.031229] copy_creds+0x72/0x580 [ 3024.032153] copy_process+0xfef/0x78b0 [ 3024.033147] ? event_sched_in+0x5b1/0xaa0 [ 3024.034098] ? lock_acquire+0x197/0x470 [ 3024.035000] ? find_held_lock+0x2c/0x110 [ 3024.035876] ? __cleanup_sighand+0xb0/0xb0 [ 3024.036794] ? _copy_from_user+0xfb/0x1b0 [ 3024.037853] kernel_clone+0xe7/0x980 [ 3024.038647] ? create_io_thread+0xf0/0xf0 [ 3024.039583] __do_sys_clone3+0x1e5/0x320 [ 3024.040552] ? __do_sys_clone+0x110/0x110 [ 3024.041687] ? finish_task_switch+0x126/0x5d0 [ 3024.042727] ? finish_task_switch+0xef/0x5d0 [ 3024.043833] ? io_schedule_timeout+0x140/0x140 [ 3024.044813] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3024.045789] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3024.047077] ? ksys_write+0x1a9/0x260 [ 3024.048006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3024.049345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3024.050436] ? trace_hardirqs_on+0x5b/0x180 [ 3024.051530] do_syscall_64+0x33/0x40 [ 3024.052328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3024.052434] 9pnet: Insufficient options for proto=fd [ 3024.053407] RIP: 0033:0x7f7b970cfb19 [ 3024.053426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3024.053436] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3024.053455] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 3024.053465] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 3024.053476] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.053496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3024.068214] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 [ 3024.107625] 9pnet: Insufficient options for proto=fd 17:27:44 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0xe1, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3024.158714] 9pnet: Insufficient options for proto=fd 17:27:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500), 0x8}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3024.183306] 9pnet: Insufficient options for proto=fd 17:27:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="74733d66e4d600cc69d1ad5c8157a0f82c72666485f13d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3024.358957] 9pnet: Insufficient options for proto=fd [ 3024.405010] 9pnet: Insufficient options for proto=fd 17:28:01 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0xf0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:28:01 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 8) 17:28:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1a) 17:28:01 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 11) 17:28:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x18) 17:28:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x82212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000600)='mnt/encrypted_dir\x00', 0x40282, 0x104) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000002}}, './file0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0, 0x40000040}, 0x9) syz_io_uring_submit(r2, 0x0, &(0x7f0000000680)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x2d, 0x2, &(0x7f0000001100)="480b82302a06cd8595ff44a1ff2de7fcc0195e032e071655db73f2b655c3bf152a003d0ff68035c4de6b1fdddc8c0f7d8a12655626cd2a3a0efa43f3d39336fe901daad0d0635038618445ce6166f93966d9bd4e6b179b484afb05cf534a316bd34f2512319838cf67209003cbee4ef01a4d06b76589d952f3ee2b1ede8efc46c87640401429616801439b42cc91afea7675a276df0dd1cee5a0e5b64949e0cb05332ade4dd7d9cd8369c74a551c3751e686a0620337c78531e61fc06f09bef9925bf5f9cdeb89251904ee000dc9c5a22f751fdc853c00471ca89089170437489fa82bd8dfebafb49014d616ad28b967bdf0631930e10e7e06a23938b379a2f4e0ff525ff8bce1579719ad72a77b3f690e6d977cae342f43e2c6453068177612f7f755f6e493419cfebd0290fa59e2a5efb76a2b12b1322bd6a93a1ce96d3f269240f553b6db2d0a5107202923c1c93cee8e34737ad071986012fc10181249fd56932331ee7722a432c8eaa0fbc47ff329ee09d313fac79e638df392b761bc3d8f15674f94efabbc7ef50d7adbf5640ecb70f7b72be4988a85de4022c7c7d2a0a11655d84584fdefc0b42e47c62a4c4668da9016ee26037970bea636a8ab93e8026ad932bc2fd4ea240783b1fa42ea59d90922866c671d429fc6de7ce0b4884a466d555e27308b77cbf1d0253db724ce55737890fdf6c3e1fa26c7bc6a3ed0a02500702ee8fad81424a828318f2391026083648f8bd9621a67c5dbcdf994305484e32de7d03e2e7a6d314b74fbc661d463c06cbcff45922e7550ed27c2e76c84e0a7f61681dcce028f82e0a7a8ad13bd6b495c01f4a8f2b2d49a57a578b39f124771bf5e7a47560698a5b3fc3eff0f0a17b597513905cdfe17257e4063bad9aaf467fd005449bea509826bcf1ec7df4650f56b8d1cbe2abab7c2e9e10e12f4f42c7641c81b7c1df90fcbada188c101397a5e65c1efe1cc48eac6848192f8961f958eecc2ae27f66b9a00c17225f79cad3609223ebc9582c8d950266140f689b2cf1a4937b0cecf1f853a08ab0e909efebfe9e3346bf9fe7118b0a7196e1d8329027f52c567d7c3474bc1701cd8a28fb727c5637365af7f0afa4369983a4d1c235d557c327a14ff7c1f55c6e896bf365fcaa4c0b323d0864b23febb6379330e017d8e984ca7aff922424c669b4f7c4f2a7544c027f78f5bd4a5c8bb94204aa2f4bdbda855bdd60089cb820dfe20b71cae80deed6d92a98b38cdddd51b14b51207016dac7be57ba2cbbc1ab578994560c8625e9210b18674954f449f543d5eed71874548226849c97bc1d8eb0ca2d74ee38360eabc998c157e0b0bdbc5b4d2be57cc9d9054381285ff10d466804611ecc00d9e6100bc76c559f98e9379d3e2342bc29d58b62e685201bde6cb0257a4045523c7d2751c495855fdc65ccf73e1313f1514c129b869e8bf2546f86e44ba64eb03929640ec6a503405f1f819c86b8a922100f81fa3399aa4127ef563da25a6f62d80dce89998579e42fed2a79c1f097dcd1f02e8e3ae48513df323f81b9d016474f51e95436a91f3490908d1d9201d742ae572a821d0a4807dcdf94ab7b24d0277214d342e20f0674fa74f0693510ca092adc6beacc124f96a1852d1e2768a75c76e29abc177a9171baa41786005ca4170587414ed7f89041830eb4802511b58bae4473dca5bfc9d16197d64bf42ea965442bf6404ef92ad23bf081ac4c4dcd60d63efc95906109c248f14ca3b1fbbe0270b9fb54a7b1bcfdc645db240b22885202e2b757558220ac3a7c7d9144b9931cb658fedf239426720ab68e590741aab9e7ad6b10a85b2d286aac88a66dadaf97af0544567e2d6ea35c6631e116418c19b443fb5b5250173f438df355964d8761177b88db668b8ddd94aaae1373a1dc866b1536ee1e21f6002e50d92169ec704e4c6bb866c07b2dcb5ba26e07368d7453a8d58d758a0da9fc4e6663497d4d6ab57f454c8492e9c10bd158fe6c5cab1d6455260ea8f330d48f7257ccb04f178070460bbd05bba99eb63824591f5b02f3f85317f6ca448542eccd3c40c93a446d81663390513cae4c82023179e1bdcf16a7541af520e8f275f8af8db1dd0d7cbde43b9dfd445fcd1ccb7da08ad0f9ce81d3fba1c503cbf106b137bb99b102d24b0ca695093bf3ed4e4e2afb36ab1622e1c92b521297a07b74e73fc701db74fcce7482ece0fc39084c2a7ed2b0e9c539be898dbf110bb2c3bcf79c83f37004590da5ff4fb6d1d0826bf5ac03a37da5eb9fb3de3ecd4d60fbeb5a3351a1dc3687a32dd28db0cd8caa245a6fa53514d7a8acb967a07a7f0bd3bb7ceaed3ee4bfefbf94533adfb11f344ec1dba4a405a3ecb032c34dced60a0ccde0f90bd2b05ce477ef5483a4499d7854a3c1a1e97690655edfd23f6fe3becaee2f56b541eb112255a25f7daa13d48c9d2fcc61e7cbee0a7bdfa639768250432346f702aaaef287d84173bff5c1432889278ddc9be945a4c934d6c65a04bee14ec76f95369b3dadd5976b3ce09d0c6c3289bfec4bbec2c86de9411a71beebcdceafd601373ad9bf8825e511a25180cb4db0e7c1635e19426d94a38f82815d42da852bbb7662e5833c2f437913c8cd7fb1733d67a80ea29cbb1098a6a70c63f12ea66229a4f82738f8560cdd1df0e1876de610c1bab91dd1318adb3d9e6918a9c29f06f85ba2c277304bcebc06e8ac6a8707e32cce45363c0963d85e8632113673925fdefa3a432b4dc7ae4c19356187ea529b971f4662397ad3049b61c27b937872f4aad3535300a39b4b8a96305edc9649d1c4cc78789575fe77ecf324117e88eb962fbb650948cfeb24e2be096c215ef4afe56f074a0ffc2d778258f8f217b7fb8f4a8ceaf0c6251f4083dc15be5da776fbb8a4819e31a638af620725224f590fc5f0a576032059c42cd17bae6d385fd0e14fe2f4f9f066dc40ea428b4406c3fd3e999e70cad7369932a0d3d24e6a0e4835a69c7031676727c1087cefb9c430f93ec728bad0fd9951b5a1d2aaf9a23f4991a8c4bb1b18f223b81f64be6c667e9dad129d3fa5dc45c477bc29d76154d43161b7d220dc7100ce0adfc7c9bc5962138be69cd2ae43e1f8b39f2056b48d2c1f96034ca025e2ef2c067b897a214ce21db43d6345de05674d60b568fe6cafede82829cfaafbffca0b4bb609a2040a59812700b97c682829d929579e1268604054803a355f41c98b8328e3c8c8163a1247f072a5cbfbc1ff50a12bcbf66146bb79ad68b11d405f95f75ea0679ae0ac8cfe3c3d93b5a3f3d405b64975dbb1bf7f2561adbc93807f00000d9363cbf1807f46d39bfee58cc231ea9c46ab85b3dd2e41c9da72d415940c0d6f9cb582c38d317ddd6c41da2e06fec264b195795bec5de0d58a85eb834ed6da7c2760ce68c852054ad8e3ae7aa34ee7455a70f589ba17565f1060a6720370f9540a3d871a3be9fffcd82ab7a408a044372ea885497ddc9f8b33e54f6f59648a9f6aab8447e3239e394afb73d92e38ebf9146c6b018f32f2ef7ee681271f90328aff1e71a83f3ef4d083dc82123c3b88c752aea61c8b123cadf555ffb8619c0227bf89bf48dbf2a0338a74887a9f8129cf42292a5ff09caddf1fb907f566a4f3ec12ee4789e9b9b01480cc042de3fad181e4d0b66786e65ec308b60c4b29e25be2a97d975a3a9b05551d02c5ec406a24f2cbacdfed40852f3c429348f578efb96cf53fad9d6bd8bd9c56b573aa3aa34c814bb263e06b042d2671ede00bc44fae346bd6b7c8a4fc13d18b00890bdd0303bbe7d5cdf6b8a933453dcded9ed18f9fc187e5b4fc4da745fffd813b7db8acb3aa27dc7be128841fa689586c2f0b30715ca40e52597a671b66a3eec63cf8bb1a2c62059536772cb5470df6168cdb41e10b6dc2c8c1802ce0157cae9c6d7cd417eeb4d68fd68c7090bcb2a4a90322fa46688f1c5b0f7eae9e234ac80433aa6a4f9148063e3c64eb98a3702a9a6b59bb87a548bc4a77421e40eb4265971d6cb405b955015ae777c1e1e9d42bb803e7ff46978b96d4c0c1081d6f7c752e3474f31ba370bbd5f7aa9f2b3f8a7c548f67d39318bb83c309ff888591e20e8f0ae4c990d538eba0e458d586164d63f5c33031f1fcf8d693106d69405aca3791d3efc9f5f7ba47987737ca5dc19e1e81080bdd10972fb3c75e760f7ccf44234abfc0cc2bd67d0d99822a9f712072c1a6cf89b61c505fbaa0092296517be86376632ddda522f22d6a4ea75b4c95ec8f620513d337318d306e6d888c778e3aac70b9cbb2874b8c534c82e8d68c00862320afde7638122c3be0bbc08c6d78d76a58b1b3773165010465d8dc1e29d2088a275d9824f9ba4cdc4e11500324d3aee403c8a445b4ac01b3cdd9aa44fdcfd1c38ca6ad9f3f04c7c6b98a166ca265b6664df43f70b6993631a36fd30da612b56c3d8fc0871acb3d2004b1fa4ac2a5a412e6e4109192d531e5d3b396ad67955aea03e5afe8b5a3c380658aae18fa06e25191e9ce11b3e6cdbf3e1a06cc2c4910d682bbc64bacaf654191c3124d1f7ac463fad16220dfdc43ffa117e3953bcf528d18c3af8a2911161aaaf56ad82bc7d5e66bd172d6475802c39b0b1d4fccd369c87f4ab2cc121109b9f60f3acb3cd796759b4f18179f2f075b372706cbc1a55c183b52495b841f21315f9a2a3ed67991b1a0d94c92105ffea82d093fd022f6d1439953f224c3e573635dd04ff784cdb0cec72018b2516bbfe212c54e155a22d9b570df1a9551227eda854e069a5a7a6e6e21098ab58de3db47ad360ab719550a5f6960fe85d945b59131220e7120e0eab9afd7fa002862d16b5c79ad82fe32c04e7e409fa836eb818c6d25c1e788ba0ae1f77099a5920aa51e67dd5c8ff2ce229a5579d904a94f7d92800f12142ba8ce3f0af7bee1ff2d6b4b393c523d8ca9e728f362a4f5399b500709a0a069371ddde1880d8d305f61fcc70f03dae0fe692bdbb9ac1364c3402ea5d3f8645daa871afbac5f04a8c3cc5892213dd9988cdae6277d972c28bebed2deb9ad26838b15d8a6c80c1e6532012ccac37a29ab5f494b38813a9f68f2601a9ea14faf915c1b5a47a6b7319757b602dda2053b8c9d615d22d3eb034ff3de9c2e4f9b41c5a384cf4a7f4c9191d0dd75cb5d6e24829ad09d8f1e0f7fb2c7ba1fcc036db2683ff0cf63112cd83feada5a1b6a1d403853297b1217480ce3ca654f2f8cbc7cc266ad26d41722964444489f5f66076acfa75a7d9788a50fd8aa69d15ea88e49fef5a934609e94ea9f9ddf812102630cc836d104fbcecb8ec9bd2c5d600d238714d330bcde0d03f447ca7b7133ca904e080e8207e1c737e632d412e26251ad1cc4e7d0bacdb577bdd75b90ff6ccfdac490a6bb6d9db762aab148390dfa65337ae903514ee108dfc7fbf502be83e69d426252ed92e16a67863776582bc7c03e525563252fb719f400d6b0f533a599be9f6c74c5e3c982698353b8516008ececc0685433e6e871ec02926f0b39c3555657137affad0a9cc8a825b1021ed555879cfb0c2c924e686aa18012c6524cc5434de56f013458c70341ac156e4da7fbba04c50613f842322ffa5e4f7a4751e4dac1d6e5405297a321b7e766c31324ad6ca1b54a15c8ae91035a9dbc85b17e94a335535400089dc19d1ac3d55370b24300d42da9119aa4d3b8dba73c8e97b9d9aab67557a37f3b1e9cbc3b235bf7de599c87d6b209640f5260dd783d79314a4fae3d0f930a7b00479e7c6716c9237f6be1fee03964ea7895664499e", 0x4, 0x0, 0x1, {0x3}}, 0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:28:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x12, r2, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r10, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x1) 17:28:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d9f742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3040.841116] FAULT_INJECTION: forcing a failure. [ 3040.841116] name failslab, interval 1, probability 0, space 0, times 0 [ 3040.844186] CPU: 1 PID: 14974 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3040.845895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3040.848160] Call Trace: [ 3040.848765] dump_stack+0x107/0x167 [ 3040.849574] should_fail.cold+0x5/0xa [ 3040.850428] ? create_object.isra.0+0x3a/0xa30 [ 3040.851439] should_failslab+0x5/0x20 [ 3040.852427] kmem_cache_alloc+0x5b/0x310 [ 3040.853327] create_object.isra.0+0x3a/0xa30 [ 3040.854307] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3040.855447] kmem_cache_alloc_trace+0x151/0x320 [ 3040.856503] ? io_tctx_exit_cb+0xf0/0xf0 [ 3040.856602] FAULT_INJECTION: forcing a failure. [ 3040.856602] name failslab, interval 1, probability 0, space 0, times 0 [ 3040.857381] percpu_ref_init+0xd8/0x3d0 [ 3040.857409] io_uring_setup+0x47a/0x2980 [ 3040.857430] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3040.857464] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3040.864133] ? wait_for_completion_io+0x270/0x270 [ 3040.865202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3040.866343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3040.867498] do_syscall_64+0x33/0x40 [ 3040.868314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3040.869433] RIP: 0033:0x7f15cb12cb19 [ 3040.870239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3040.874258] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3040.875939] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3040.877490] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3040.879037] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3040.880604] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3040.882150] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3040.883741] CPU: 0 PID: 14969 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 3040.885250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3040.887032] Call Trace: [ 3040.887603] dump_stack+0x107/0x167 [ 3040.888399] should_fail.cold+0x5/0xa [ 3040.889231] ? create_object.isra.0+0x3a/0xa30 [ 3040.890212] should_failslab+0x5/0x20 [ 3040.891037] kmem_cache_alloc+0x5b/0x310 [ 3040.891931] create_object.isra.0+0x3a/0xa30 [ 3040.892876] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3040.893963] __kmalloc+0x16e/0x390 [ 3040.894733] security_prepare_creds+0x112/0x190 [ 3040.895723] prepare_creds+0x452/0x5e0 [ 3040.896550] copy_creds+0x72/0x580 [ 3040.897300] copy_process+0xfef/0x78b0 [ 3040.898130] ? mark_lock+0xf5/0x2df0 [ 3040.898924] ? lock_acquire+0x197/0x470 [ 3040.899764] ? find_held_lock+0x2c/0x110 [ 3040.900644] ? __cleanup_sighand+0xb0/0xb0 [ 3040.901551] ? _copy_from_user+0xfb/0x1b0 [ 3040.902433] kernel_clone+0xe7/0x980 [ 3040.903228] ? lock_acquire+0x197/0x470 [ 3040.904086] ? create_io_thread+0xf0/0xf0 [ 3040.904975] ? ksys_write+0x21a/0x260 [ 3040.905776] ? lock_downgrade+0x6d0/0x6d0 [ 3040.906660] __do_sys_clone3+0x1e5/0x320 [ 3040.907518] ? __do_sys_clone+0x110/0x110 [ 3040.908414] ? rcu_read_lock_any_held+0x75/0xa0 [ 3040.909391] ? vfs_write+0x354/0xb10 [ 3040.910173] ? fput_many+0x2f/0x1a0 [ 3040.910936] ? ksys_write+0x1a9/0x260 [ 3040.911740] ? __ia32_sys_read+0xb0/0xb0 [ 3040.912822] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3040.913931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3040.915009] ? trace_hardirqs_on+0x5b/0x180 [ 3040.915930] do_syscall_64+0x33/0x40 [ 3040.916719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3040.917792] RIP: 0033:0x7f7b970cfb19 [ 3040.918578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3040.922461] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3040.924080] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 3040.924690] 9pnet: Insufficient options for proto=fd [ 3040.925585] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 3040.925596] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 3040.925607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3040.925618] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 [ 3040.979896] 9pnet: Insufficient options for proto=fd [ 3040.987816] 9pnet: Insufficient options for proto=fd [ 3041.038896] 9pnet: Insufficient options for proto=fd [ 3041.056385] 9pnet: Insufficient options for proto=fd 17:28:01 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 12) [ 3041.089780] 9pnet: Insufficient options for proto=fd 17:28:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="014800000100009b8fffff00", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200667e154ef4802d5c1a01183af4fd987961822ea8efde8b52223d79ef13ffb4a0713dd5d9f804d0348a1f62d960a59a9c25c128b5b015fa6bc7f20b0c"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="7472716e733d66645a00010400003d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = accept(r5, &(0x7f0000000680)=@caif=@dbg, &(0x7f0000000600)=0x80) ppoll(&(0x7f0000000700)=[{r10, 0x1400}], 0x1, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f0000000780)={[0x7]}, 0x8) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:28:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000010000002f656e63727970746564df64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:28:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1b) [ 3041.232758] FAULT_INJECTION: forcing a failure. [ 3041.232758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3041.235285] CPU: 0 PID: 14994 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3041.236772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.238507] Call Trace: [ 3041.239063] dump_stack+0x107/0x167 [ 3041.239826] should_fail.cold+0x5/0xa [ 3041.240648] __alloc_pages_nodemask+0x182/0x600 [ 3041.241629] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3041.242895] ? cap_capable+0x1cd/0x230 [ 3041.243724] alloc_pages_current+0x187/0x280 [ 3041.244650] __get_free_pages+0xc/0xa0 [ 3041.245468] io_uring_setup+0xe27/0x2980 [ 3041.246328] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3041.247387] ? wait_for_completion_io+0x270/0x270 [ 3041.248431] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.249538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.250635] do_syscall_64+0x33/0x40 [ 3041.251428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3041.252514] RIP: 0033:0x7f15cb12cb19 [ 3041.253300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.257168] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3041.258767] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3041.260272] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3041.261768] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3041.263269] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3041.264764] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:28:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r9}}, 0x1) 17:28:02 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 9) 17:28:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x19) [ 3041.384745] FAULT_INJECTION: forcing a failure. [ 3041.384745] name failslab, interval 1, probability 0, space 0, times 0 [ 3041.387732] CPU: 1 PID: 15005 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 3041.389270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.391122] Call Trace: [ 3041.391734] dump_stack+0x107/0x167 [ 3041.392575] should_fail.cold+0x5/0xa [ 3041.393433] ? __delayacct_tsk_init+0x1b/0x80 [ 3041.394434] should_failslab+0x5/0x20 [ 3041.395271] kmem_cache_alloc+0x5b/0x310 [ 3041.396184] ? prepare_creds+0x466/0x5e0 17:28:02 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 13) [ 3041.397108] __delayacct_tsk_init+0x1b/0x80 [ 3041.398358] copy_process+0x3399/0x78b0 [ 3041.399220] ? mark_lock+0xf5/0x2df0 [ 3041.400053] ? lock_acquire+0x197/0x470 [ 3041.400923] ? find_held_lock+0x2c/0x110 [ 3041.401807] ? __cleanup_sighand+0xb0/0xb0 [ 3041.402739] ? _copy_from_user+0xfb/0x1b0 [ 3041.403798] kernel_clone+0xe7/0x980 [ 3041.404628] ? lock_acquire+0x197/0x470 [ 3041.405527] ? create_io_thread+0xf0/0xf0 [ 3041.406537] ? ksys_write+0x21a/0x260 [ 3041.407604] ? lock_downgrade+0x6d0/0x6d0 [ 3041.408598] __do_sys_clone3+0x1e5/0x320 [ 3041.409659] ? __do_sys_clone+0x110/0x110 [ 3041.410575] ? rcu_read_lock_any_held+0x75/0xa0 [ 3041.411908] ? vfs_write+0x354/0xb10 [ 3041.413170] ? fput_many+0x2f/0x1a0 [ 3041.414122] ? ksys_write+0x1a9/0x260 [ 3041.415177] ? __ia32_sys_read+0xb0/0xb0 [ 3041.416359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.418066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.419552] ? trace_hardirqs_on+0x5b/0x180 [ 3041.420822] do_syscall_64+0x33/0x40 [ 3041.422008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3041.423291] RIP: 0033:0x7f7b970cfb19 [ 3041.424274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.428975] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3041.430951] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 3041.432610] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 3041.434456] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 3041.436328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3041.438020] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 17:28:02 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0xf8, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3041.489840] 9pnet: Insufficient options for proto=fd [ 3041.492448] 9pnet: Insufficient options for proto=fd [ 3041.501024] FAULT_INJECTION: forcing a failure. [ 3041.501024] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3041.503637] CPU: 1 PID: 15014 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3041.505132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.506916] Call Trace: [ 3041.507496] dump_stack+0x107/0x167 [ 3041.508292] should_fail.cold+0x5/0xa [ 3041.509118] __alloc_pages_nodemask+0x182/0x600 [ 3041.510135] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3041.511449] ? cap_capable+0x1cd/0x230 [ 3041.512305] alloc_pages_current+0x187/0x280 [ 3041.513247] __get_free_pages+0xc/0xa0 [ 3041.514176] io_uring_setup+0xf9a/0x2980 [ 3041.515216] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3041.516529] ? wait_for_completion_io+0x270/0x270 [ 3041.517802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.519157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.520565] do_syscall_64+0x33/0x40 [ 3041.521579] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3041.522797] RIP: 0033:0x7f15cb12cb19 [ 3041.523619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.527572] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3041.529248] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3041.530801] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3041.532333] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3041.533873] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3041.535422] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3041.608472] 9pnet: Insufficient options for proto=fd 17:28:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) getdents(r10, &(0x7f0000000680)=""/64, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 3041.688312] 9pnet: Insufficient options for proto=fd 17:28:02 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 14) [ 3041.746852] FAULT_INJECTION: forcing a failure. [ 3041.746852] name failslab, interval 1, probability 0, space 0, times 0 [ 3041.749341] CPU: 0 PID: 15024 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3041.750806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.752567] Call Trace: [ 3041.753127] dump_stack+0x107/0x167 [ 3041.753901] should_fail.cold+0x5/0xa [ 3041.754709] ? io_uring_setup+0x17ed/0x2980 [ 3041.755616] should_failslab+0x5/0x20 [ 3041.756431] kmem_cache_alloc_trace+0x55/0x320 [ 3041.757526] ? alloc_pages_current+0x18f/0x280 [ 3041.758490] io_uring_setup+0x17ed/0x2980 [ 3041.759369] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3041.760454] ? wait_for_completion_io+0x270/0x270 [ 3041.761498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.762600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.763682] do_syscall_64+0x33/0x40 [ 3041.764486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3041.764554] 9pnet: Insufficient options for proto=fd [ 3041.765565] RIP: 0033:0x7f15cb12cb19 [ 3041.765586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.765597] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3041.765617] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3041.765628] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3041.765639] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3041.765650] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3041.765660] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:28:02 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 15) [ 3041.888954] FAULT_INJECTION: forcing a failure. [ 3041.888954] name failslab, interval 1, probability 0, space 0, times 0 [ 3041.890485] 9pnet: Insufficient options for proto=fd [ 3041.891336] CPU: 1 PID: 15027 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3041.891347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.891353] Call Trace: [ 3041.891379] dump_stack+0x107/0x167 [ 3041.891399] should_fail.cold+0x5/0xa [ 3041.891421] ? create_object.isra.0+0x3a/0xa30 [ 3041.891437] should_failslab+0x5/0x20 [ 3041.891467] kmem_cache_alloc+0x5b/0x310 [ 3041.900222] create_object.isra.0+0x3a/0xa30 [ 3041.901132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3041.902184] kmem_cache_alloc_trace+0x151/0x320 [ 3041.903138] ? alloc_pages_current+0x18f/0x280 [ 3041.904107] io_uring_setup+0x17ed/0x2980 [ 3041.904971] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3041.906015] ? wait_for_completion_io+0x270/0x270 [ 3041.907030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.908130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.909199] do_syscall_64+0x33/0x40 [ 3041.909970] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3041.911022] RIP: 0033:0x7f15cb12cb19 [ 3041.911783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.915510] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3041.917056] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3041.918499] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3041.919954] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3041.921405] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3041.922839] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:28:17 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0xf9, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:28:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) mknodat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0, 0x200) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x1, &(0x7f0000000680)={0x0, 0x6886, 0x1, 0x0, 0x277}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:28:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000d7fae9c2021c1fcc5251bd93c0198d4ceaddd927bd1213e79418e74041221741d5f3aee7283b5178fbb81a3bdf2ffa291aa0921d2e1697286d394884c808af2aa5b6b2f19674a166ee31a12a541b77c231", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:28:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1a) 17:28:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000640)='./mnt\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:28:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1c) 17:28:17 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 10) 17:28:17 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 16) [ 3057.138540] FAULT_INJECTION: forcing a failure. [ 3057.138540] name failslab, interval 1, probability 0, space 0, times 0 [ 3057.141126] CPU: 1 PID: 15049 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3057.142620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3057.144421] Call Trace: [ 3057.144993] dump_stack+0x107/0x167 [ 3057.145787] should_fail.cold+0x5/0xa [ 3057.146610] ? copy_process+0x3305/0x78b0 [ 3057.147505] should_failslab+0x5/0x20 [ 3057.148334] kmem_cache_alloc_node+0x55/0x330 [ 3057.149298] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3057.150426] copy_process+0x3305/0x78b0 [ 3057.151295] ? stack_trace_save+0x8c/0xc0 [ 3057.152256] ? lock_acquire+0x197/0x470 [ 3057.152274] ? io_sq_thread_park+0x79/0xd0 [ 3057.152296] ? lock_release+0x680/0x680 [ 3057.152317] ? __cleanup_sighand+0xb0/0xb0 [ 3057.152336] ? kernel_text_address+0xf2/0x120 [ 3057.152358] ? find_held_lock+0x2c/0x110 [ 3057.152382] ? io_uring_setup+0x1c23/0x2980 [ 3057.152400] ? lock_downgrade+0x6d0/0x6d0 [ 3057.152422] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3057.152440] create_io_thread+0xb6/0xf0 [ 3057.152457] ? pidfd_prepare+0x80/0x80 [ 3057.152481] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3057.152515] io_uring_setup+0x1d79/0x2980 [ 3057.152541] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3057.152557] ? wait_for_completion_io+0x270/0x270 [ 3057.152596] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3057.152617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3057.152638] do_syscall_64+0x33/0x40 [ 3057.152658] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3057.152671] RIP: 0033:0x7f15cb12cb19 [ 3057.152689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.152699] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3057.152717] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3057.152728] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3057.152739] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3057.152750] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3057.152761] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3057.168726] FAULT_INJECTION: forcing a failure. [ 3057.168726] name failslab, interval 1, probability 0, space 0, times 0 [ 3057.207100] CPU: 1 PID: 15044 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 3057.208602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3057.210386] Call Trace: [ 3057.211015] dump_stack+0x107/0x167 [ 3057.211936] should_fail.cold+0x5/0xa [ 3057.212962] ? create_object.isra.0+0x3a/0xa30 [ 3057.213919] should_failslab+0x5/0x20 [ 3057.214856] kmem_cache_alloc+0x5b/0x310 [ 3057.215888] create_object.isra.0+0x3a/0xa30 [ 3057.216958] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3057.218198] kmem_cache_alloc+0x159/0x310 [ 3057.219074] __delayacct_tsk_init+0x1b/0x80 [ 3057.219985] copy_process+0x3399/0x78b0 [ 3057.220835] ? mark_lock+0xf5/0x2df0 [ 3057.221619] ? lock_acquire+0x197/0x470 [ 3057.222457] ? find_held_lock+0x2c/0x110 [ 3057.223327] ? __cleanup_sighand+0xb0/0xb0 [ 3057.224252] ? _copy_from_user+0xfb/0x1b0 [ 3057.225126] kernel_clone+0xe7/0x980 [ 3057.225905] ? lock_acquire+0x197/0x470 [ 3057.226904] ? create_io_thread+0xf0/0xf0 [ 3057.227918] ? ksys_write+0x21a/0x260 [ 3057.228875] ? lock_downgrade+0x6d0/0x6d0 [ 3057.229966] __do_sys_clone3+0x1e5/0x320 [ 3057.230828] ? __do_sys_clone+0x110/0x110 [ 3057.231712] ? rcu_read_lock_any_held+0x75/0xa0 [ 3057.232693] ? vfs_write+0x354/0xb10 [ 3057.233478] ? fput_many+0x2f/0x1a0 [ 3057.234245] ? ksys_write+0x1a9/0x260 [ 3057.235036] ? __ia32_sys_read+0xb0/0xb0 [ 3057.235894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3057.237013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3057.238239] ? trace_hardirqs_on+0x5b/0x180 [ 3057.239154] do_syscall_64+0x33/0x40 [ 3057.239976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3057.241262] RIP: 0033:0x7f7b970cfb19 [ 3057.242247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.246126] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3057.247626] 9pnet: Insufficient options for proto=fd [ 3057.247735] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 3057.247747] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 3057.247773] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 3057.253845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3057.255656] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 [ 3057.257566] 9pnet: Insufficient options for proto=fd [ 3057.294420] 9pnet: Insufficient options for proto=fd [ 3057.299894] 9pnet: Insufficient options for proto=fd [ 3057.317687] 9pnet: Insufficient options for proto=fd [ 3057.350546] 9pnet: Insufficient options for proto=fd 17:28:18 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 17) 17:28:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x0, 0x8, 0x4, 0xfffffffb, 0xb4, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e63727970ae6fe1587465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000240)='mnt/encrypted_dir\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3057.420599] FAULT_INJECTION: forcing a failure. [ 3057.420599] name failslab, interval 1, probability 0, space 0, times 0 [ 3057.423103] CPU: 1 PID: 15062 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3057.424527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3057.426212] Call Trace: [ 3057.426750] dump_stack+0x107/0x167 [ 3057.427491] should_fail.cold+0x5/0xa [ 3057.428282] ? create_object.isra.0+0x3a/0xa30 [ 3057.429204] should_failslab+0x5/0x20 [ 3057.429980] kmem_cache_alloc+0x5b/0x310 [ 3057.430813] create_object.isra.0+0x3a/0xa30 [ 3057.431711] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3057.432765] kmem_cache_alloc_node+0x169/0x330 [ 3057.433704] copy_process+0x3305/0x78b0 [ 3057.434528] ? stack_trace_save+0x8c/0xc0 [ 3057.435385] ? lock_acquire+0x197/0x470 [ 3057.436205] ? io_sq_thread_park+0x79/0xd0 [ 3057.437064] ? lock_release+0x680/0x680 [ 3057.437875] ? __cleanup_sighand+0xb0/0xb0 [ 3057.438744] ? kernel_text_address+0xf2/0x120 [ 3057.439667] ? find_held_lock+0x2c/0x110 [ 3057.440520] ? io_uring_setup+0x1c23/0x2980 [ 3057.441400] ? lock_downgrade+0x6d0/0x6d0 [ 3057.442248] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3057.443232] create_io_thread+0xb6/0xf0 [ 3057.444033] ? pidfd_prepare+0x80/0x80 [ 3057.444838] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3057.445841] io_uring_setup+0x1d79/0x2980 [ 3057.446682] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3057.447700] ? wait_for_completion_io+0x270/0x270 [ 3057.448696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3057.449754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3057.450805] do_syscall_64+0x33/0x40 [ 3057.451557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3057.452607] RIP: 0033:0x7f15cb12cb19 [ 3057.453356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.457094] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3057.458628] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3057.460078] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3057.461523] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3057.462968] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3057.464402] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:28:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') syz_io_uring_setup(0x3872, &(0x7f0000000700), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000070000006957bf3477236530"]) sendmsg$nl_netfilter(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000001100)={0x1210, 0x8, 0x6, 0x201, 0x70bd2d, 0x25dfdbff, {0x3, 0x0, 0x8}, [@nested={0xa9, 0x80, 0x0, 0x1, [@generic="466e89a2743810e2b203ffa8af9e1e7fc7bc54873dc9868ffe41849b5f62376b17c690b3861debb1964bcc8102644698e2675faf47c68c01e3d87e526d6c989f82011212e7610db6db435da78a31695074202cb68d72574fdf9856d7dd59c99990f717cc88b19cc07772fa94b19ad1bcfb672adbed21798a7ec91740340f30709dc78fc5abf0d83f4c7e3fb89a83601a5977af23126e4cd619a7b0f26a1e45596f64113758"]}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x7fff}, @typed={0xec, 0x85, 0x0, 0x0, @binary="e264fbd9c8e39d626e4e1a62a3bc4ce387d2d4c68d92f42cc5847fdda482fce5b755346a2ca93a8b9e141294544780c199de713b37b3e3f0ce0274a24e063d7cd65b73005ec14dc04886c49672d189433531a7978d2a71a20535449a3c7d27003c175e9363326cf5362869142bb887d757748232185eb15fd4736bcf02f593f5bfab71f63e3c10d98c438d346741c33f330f1fc46b2798ba3d110b841f79230ea3dda0bb53e94a3bf5e817ccf1f160c391af8a550e291223e21201c8a4406a25ff6deda165cb33d092d2e761274c2a6dd0bed85f32200594317199e6148b6ca26bf86e862a37d2a5"}, @typed={0x4, 0x65}, @generic="d2f925b5adbace47938f7c3a385ab18972e0551bad7fa2d193c70724000bf9185db2d2b973ff1aa909b65d40e8927dda6dd46f8e0c970be00a4755bf7f32b254ce8972efcc0d0ccf52895fa67958", @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="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"]}, 0x1210}, 0x1, 0x0, 0x0, 0x20000014}, 0x54080) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:28:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) symlinkat(&(0x7f0000000600)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='mnt/encrypted_dir\x00') rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000006c0)=ANY=[@ANYBLOB="11000000000000000000000090f65e683145afb1dc0e74e1e0ffaabb427a5e08089df813659422241e38b6c3d71fc4fc3b340fd62348752800000900075de082327893d1451a8efc5d3fa04a1ff2ce9cb3b12c3181bfe2a42cbc5b045026ce0372fa847cb4490b61090ab1fb82ca4f502dcda7a8aefae04c7f2724e340b8d44555ad089799a16cc8a2cc5a4b2807034403c26c27a7a823b0bdadd5a2c4897959ffdc94919a9efdcc070c9610c103176c4ce0f02cbed1a877090a7900f0c082d98e71b58e405475692adb364763c094559e96cbf16411be411db9", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3057.563157] 9pnet: Insufficient options for proto=fd 17:28:18 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 18) 17:28:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1d) [ 3057.616767] 9pnet: Insufficient options for proto=fd [ 3057.656690] 9pnet: Insufficient options for proto=fd [ 3057.685729] FAULT_INJECTION: forcing a failure. [ 3057.685729] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3057.688380] CPU: 0 PID: 15077 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3057.689595] 9pnet: Insufficient options for proto=fd [ 3057.689894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3057.689909] Call Trace: [ 3057.693326] dump_stack+0x107/0x167 [ 3057.694150] should_fail.cold+0x5/0xa [ 3057.695001] __alloc_pages_nodemask+0x182/0x600 [ 3057.696021] ? lock_downgrade+0x6d0/0x6d0 [ 3057.696962] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3057.698294] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3057.699434] ? kmem_cache_alloc_node+0x2bc/0x330 [ 3057.700484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3057.701636] copy_process+0x62b/0x78b0 [ 3057.702499] ? stack_trace_save+0x8c/0xc0 [ 3057.703414] ? lock_acquire+0x197/0x470 [ 3057.704296] ? io_sq_thread_park+0x79/0xd0 [ 3057.705230] ? lock_release+0x680/0x680 [ 3057.706107] ? __cleanup_sighand+0xb0/0xb0 [ 3057.707036] ? kernel_text_address+0xf2/0x120 [ 3057.708034] ? find_held_lock+0x2c/0x110 [ 3057.708949] ? io_uring_setup+0x1c23/0x2980 [ 3057.709898] ? lock_downgrade+0x6d0/0x6d0 [ 3057.710816] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3057.711893] create_io_thread+0xb6/0xf0 [ 3057.712778] ? pidfd_prepare+0x80/0x80 [ 3057.713642] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3057.714741] io_uring_setup+0x1d79/0x2980 [ 3057.715665] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3057.716795] ? wait_for_completion_io+0x270/0x270 [ 3057.717877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3057.719026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3057.720172] do_syscall_64+0x33/0x40 [ 3057.720992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3057.722112] RIP: 0033:0x7f15cb12cb19 [ 3057.722933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.726971] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3057.728647] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3057.730209] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3057.731775] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3057.733352] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3057.734914] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3057.769403] 9pnet: Insufficient options for proto=fd [ 3057.771279] 9pnet: Insufficient options for proto=fd 17:28:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1b) 17:28:32 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 11) 17:28:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1e) 17:28:32 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 19) 17:28:32 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0xfc, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:28:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x6873, &(0x7f00000006c0)={0x0, 0x7f09, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:28:32 executing program 3: set_tid_address(&(0x7f0000000600)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000001000000180000388f3d4a1d99a3c400", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x22e5, &(0x7f00000006c0)={0x0, 0xfaeb, 0x0, 0x0, 0x260}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200d0c735ef1244b17eabc5708b7770ba0f0b228bcd0f0a213bbae6c51e36d9125ad516b5909ef0b12cc060e9a3527d30b1a88e9e7d12583bab4ff935eb9f64eb5b53ab16b24b9cb95a55590d9cab587fd130f9b4edb0836910acfe49bf63e0ea5e721696236e7a3e831967b2925d6c49833c78b92276592c05d183df2e9528fadb3675df8a9902f578ca59289fa9a7ed07ddd91fbb"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x8010) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) rename(&(0x7f0000000240)='./mnt\x00', &(0x7f0000000740)='./mnt\x00') syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:28:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000600)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3da88c2fb50cee1b7d801d01272cfb524f17027fa9ebe4b72fffc357254e26ca16305c163d12f100f486bd97010d5da4abd76ceb4ed2eff64c440b92fba1915e6c2db7d618ead79353b364a0488f882df741aef4af767c14c16b509914a2de3771498df1cd1505d18b35e1c782aa2dddf0c0a9aede56750a966d383c60b7f09089f79ff226d21da197dafdd5459e344ba8a7d916223c64b1d5ac252dea0f1b787403ac7620c6adab6fdb1bdffffbe58fc237a9e4398a4134e580c64134b80e88e504963c", @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3071.930442] 9pnet: Insufficient options for proto=fd [ 3071.934816] FAULT_INJECTION: forcing a failure. [ 3071.934816] name failslab, interval 1, probability 0, space 0, times 0 [ 3071.938152] CPU: 1 PID: 15091 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 3071.939797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3071.941796] Call Trace: [ 3071.942423] dump_stack+0x107/0x167 [ 3071.943278] should_fail.cold+0x5/0xa [ 3071.944174] ? inherit_task_group.isra.0+0x244/0x5c0 [ 3071.945431] should_failslab+0x5/0x20 [ 3071.946350] kmem_cache_alloc_trace+0x55/0x320 [ 3071.946469] 9pnet: Insufficient options for proto=fd [ 3071.947424] inherit_task_group.isra.0+0x244/0x5c0 [ 3071.947465] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3071.947491] ? trace_hardirqs_on+0x5b/0x180 [ 3071.951695] perf_event_init_task+0x375/0x800 [ 3071.952799] ? perf_event_attrs+0x40/0x40 [ 3071.953795] ? __hrtimer_init+0x12c/0x270 [ 3071.954792] ? memset+0x20/0x50 [ 3071.955596] copy_process+0x182c/0x78b0 [ 3071.956563] ? mark_lock+0xf5/0x2df0 [ 3071.957492] ? __cleanup_sighand+0xb0/0xb0 [ 3071.958531] ? _copy_from_user+0xfb/0x1b0 [ 3071.959540] kernel_clone+0xe7/0x980 [ 3071.960490] ? lock_acquire+0x197/0x470 [ 3071.961541] ? create_io_thread+0xf0/0xf0 [ 3071.962536] ? ksys_write+0x21a/0x260 [ 3071.963425] ? lock_downgrade+0x6d0/0x6d0 [ 3071.964442] __do_sys_clone3+0x1e5/0x320 [ 3071.965404] ? __do_sys_clone+0x110/0x110 [ 3071.966418] ? rcu_read_lock_any_held+0x75/0xa0 [ 3071.967523] ? vfs_write+0x354/0xb10 [ 3071.968426] ? fput_many+0x2f/0x1a0 [ 3071.969299] ? ksys_write+0x1a9/0x260 [ 3071.970218] ? __ia32_sys_read+0xb0/0xb0 [ 3071.971243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3071.972601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3071.973821] ? trace_hardirqs_on+0x5b/0x180 [ 3071.974845] do_syscall_64+0x33/0x40 [ 3071.975734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3071.976962] RIP: 0033:0x7f7b970cfb19 [ 3071.977859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3071.982666] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3071.984626] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 3071.986331] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 3071.988405] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 3071.990208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3071.992066] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 [ 3072.006502] FAULT_INJECTION: forcing a failure. [ 3072.006502] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.009256] CPU: 1 PID: 15106 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3072.010968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.013011] Call Trace: [ 3072.013663] dump_stack+0x107/0x167 [ 3072.014524] should_fail.cold+0x5/0xa [ 3072.015360] ? __delayacct_tsk_init+0x1b/0x80 [ 3072.016356] should_failslab+0x5/0x20 [ 3072.017197] kmem_cache_alloc+0x5b/0x310 17:28:32 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x106, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3072.018097] __delayacct_tsk_init+0x1b/0x80 [ 3072.019233] copy_process+0x3399/0x78b0 [ 3072.020130] ? stack_trace_save+0x8c/0xc0 [ 3072.021273] ? lock_acquire+0x197/0x470 [ 3072.022140] ? io_sq_thread_park+0x79/0xd0 [ 3072.022763] 9pnet: Insufficient options for proto=fd [ 3072.023070] ? __cleanup_sighand+0xb0/0xb0 [ 3072.023091] ? kernel_text_address+0xf2/0x120 [ 3072.023115] ? find_held_lock+0x2c/0x110 [ 3072.023142] ? io_uring_setup+0x1c23/0x2980 [ 3072.023170] ? lock_downgrade+0x6d0/0x6d0 [ 3072.028527] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3072.029698] create_io_thread+0xb6/0xf0 [ 3072.030800] ? pidfd_prepare+0x80/0x80 [ 3072.031822] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3072.033061] io_uring_setup+0x1d79/0x2980 [ 3072.033952] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3072.035356] ? wait_for_completion_io+0x270/0x270 [ 3072.036543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.037960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.039285] do_syscall_64+0x33/0x40 [ 3072.040104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.041463] RIP: 0033:0x7f15cb12cb19 [ 3072.042385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.046900] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3072.048599] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3072.050109] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3072.051878] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3072.053623] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3072.055509] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:28:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5e, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x9, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:28:32 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 20) [ 3072.084811] 9pnet: Insufficient options for proto=fd [ 3072.139497] 9pnet: Insufficient options for proto=fd [ 3072.179362] 9pnet: Insufficient options for proto=fd [ 3072.184413] 9pnet: Insufficient options for proto=fd [ 3072.208801] FAULT_INJECTION: forcing a failure. [ 3072.208801] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.211533] CPU: 1 PID: 15120 Comm: syz-executor.4 Not tainted 5.10.260 #1 17:28:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') open$dir(&(0x7f0000000600)='./file1\x00', 0x40, 0x88) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {r1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, {0x9}}, 'mnt/encrypted_dir/file0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd.rfdno=', @ANYRESHEX=r5, @ANYBLOB=',7fd_19', @ANYRESHEX=r7, @ANYBLOB="2c6e6f6465766d61702c616e616d653d002c6e6f6465766d61702c76657273696f6e3d3970323030302e752c636f6e746578743d756e636f6edc757967ec0f0b0c0ea88dcb66696e65645f752c736d61636b66737472616e736d7574653d002c002a02cc28fe44f5a3809c9a6c37c6ff0cadd7f6f1"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) [ 3072.213030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.215001] Call Trace: [ 3072.215596] dump_stack+0x107/0x167 [ 3072.216417] should_fail.cold+0x5/0xa [ 3072.217267] ? create_object.isra.0+0x3a/0xa30 [ 3072.218278] should_failslab+0x5/0x20 [ 3072.219119] kmem_cache_alloc+0x5b/0x310 [ 3072.220020] create_object.isra.0+0x3a/0xa30 [ 3072.221007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.222118] kmem_cache_alloc+0x159/0x310 [ 3072.223016] __delayacct_tsk_init+0x1b/0x80 [ 3072.223964] copy_process+0x3399/0x78b0 [ 3072.224856] ? stack_trace_save+0x8c/0xc0 [ 3072.225766] ? lock_acquire+0x197/0x470 [ 3072.226615] ? io_sq_thread_park+0x79/0xd0 [ 3072.227543] ? __cleanup_sighand+0xb0/0xb0 [ 3072.228483] ? kernel_text_address+0xf2/0x120 [ 3072.229443] ? find_held_lock+0x2c/0x110 [ 3072.230322] ? io_uring_setup+0x1c23/0x2980 [ 3072.231268] ? lock_downgrade+0x6d0/0x6d0 [ 3072.232194] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3072.233285] create_io_thread+0xb6/0xf0 [ 3072.234160] ? pidfd_prepare+0x80/0x80 [ 3072.235008] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3072.236087] io_uring_setup+0x1d79/0x2980 [ 3072.237000] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3072.238112] ? wait_for_completion_io+0x270/0x270 [ 3072.239192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.240334] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.241441] do_syscall_64+0x33/0x40 [ 3072.242262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.243402] RIP: 0033:0x7f15cb12cb19 [ 3072.244215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.248119] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3072.249796] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3072.251359] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3072.252931] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3072.254472] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3072.256006] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:28:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0100000000000000036e707465645f6469070000000000000000"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x7fa7, &(0x7f0000000680)={0x0, 0xb0c9, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6, @out_args}, './mnt\x00'}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) syz_io_uring_submit(r10, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3072.279811] 9pnet: Insufficient options for proto=fd 17:28:33 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 21) [ 3072.357516] 9pnet: Could not find request transport: fd.rfdno=0xffffffffffffffff [ 3072.375297] 9pnet: Insufficient options for proto=fd [ 3072.390048] 9pnet: Could not find request transport: fd.rfdno=0xffffffffffffffff 17:28:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1c) [ 3072.407709] FAULT_INJECTION: forcing a failure. [ 3072.407709] name failslab, interval 1, probability 0, space 0, times 0 17:28:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x23) [ 3072.410243] CPU: 1 PID: 15136 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3072.411706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.413457] Call Trace: [ 3072.414015] dump_stack+0x107/0x167 17:28:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0xa}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0xe1d) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3072.414789] should_fail.cold+0x5/0xa [ 3072.415722] ? alloc_pid+0xd7/0xd30 [ 3072.416522] should_failslab+0x5/0x20 [ 3072.417340] kmem_cache_alloc+0x5b/0x310 [ 3072.418230] alloc_pid+0xd7/0xd30 [ 3072.418985] ? copy_namespaces+0x1ca/0x4f0 [ 3072.419897] copy_process+0x3b8b/0x78b0 [ 3072.420774] ? stack_trace_save+0x8c/0xc0 [ 3072.421687] ? __cleanup_sighand+0xb0/0xb0 [ 3072.422595] ? kernel_text_address+0xf2/0x120 [ 3072.423567] ? find_held_lock+0x2c/0x110 [ 3072.424457] ? io_uring_setup+0x1c23/0x2980 [ 3072.425383] ? lock_downgrade+0x6d0/0x6d0 [ 3072.426278] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3072.427330] create_io_thread+0xb6/0xf0 [ 3072.428182] ? pidfd_prepare+0x80/0x80 [ 3072.429029] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3072.430096] io_uring_setup+0x1d79/0x2980 [ 3072.430991] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3072.432078] ? wait_for_completion_io+0x270/0x270 [ 3072.433140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.434266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.435369] do_syscall_64+0x33/0x40 [ 3072.436168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.437248] RIP: 0033:0x7f15cb12cb19 [ 3072.438089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.442221] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3072.443931] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3072.445527] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3072.447138] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3072.448736] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3072.450337] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3072.479258] 9pnet: Insufficient options for proto=fd [ 3072.514985] 9pnet: Insufficient options for proto=fd 17:28:33 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 12) 17:28:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000680)='./mnt\x00', 0x400000100, 0x0, 0x0, 0x2004000, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f00000006c0)='./file0\x00') r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x1000) openat(r1, &(0x7f0000000600)='mnt/encrypted_dir\x00', 0x100, 0x30) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x1}}, 'mnt/encrypted_dir\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) [ 3072.562507] FAULT_INJECTION: forcing a failure. [ 3072.562507] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.563806] CPU: 0 PID: 15153 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 3072.564549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.565442] Call Trace: [ 3072.565733] dump_stack+0x107/0x167 [ 3072.566126] should_fail.cold+0x5/0xa [ 3072.566548] ? create_object.isra.0+0x3a/0xa30 [ 3072.567044] should_failslab+0x5/0x20 [ 3072.567461] kmem_cache_alloc+0x5b/0x310 [ 3072.567899] create_object.isra.0+0x3a/0xa30 [ 3072.568376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.568921] kmem_cache_alloc_trace+0x151/0x320 [ 3072.569425] inherit_task_group.isra.0+0x244/0x5c0 [ 3072.569952] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3072.570499] ? trace_hardirqs_on+0x5b/0x180 [ 3072.570743] 9pnet: Insufficient options for proto=fd [ 3072.570974] perf_event_init_task+0x375/0x800 [ 3072.572605] ? perf_event_attrs+0x40/0x40 [ 3072.573049] ? __hrtimer_init+0x12c/0x270 [ 3072.573494] ? memset+0x20/0x50 [ 3072.573856] copy_process+0x182c/0x78b0 [ 3072.574295] ? mark_lock+0xf5/0x2df0 [ 3072.574706] ? __cleanup_sighand+0xb0/0xb0 [ 3072.575171] ? _copy_from_user+0xfb/0x1b0 [ 3072.575617] kernel_clone+0xe7/0x980 [ 3072.576018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.576588] ? create_io_thread+0xf0/0xf0 [ 3072.577043] ? ksys_write+0x21a/0x260 [ 3072.577452] ? lock_downgrade+0x6d0/0x6d0 [ 3072.577899] __do_sys_clone3+0x1e5/0x320 [ 3072.578333] ? __do_sys_clone+0x110/0x110 [ 3072.578794] ? rcu_read_lock_any_held+0x75/0xa0 [ 3072.579290] ? vfs_write+0x354/0xb10 [ 3072.579690] ? fput_many+0x2f/0x1a0 [ 3072.580077] ? ksys_write+0x1a9/0x260 [ 3072.580492] ? __ia32_sys_read+0xb0/0xb0 [ 3072.580931] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.581501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.582056] ? trace_hardirqs_on+0x5b/0x180 [ 3072.582528] do_syscall_64+0x33/0x40 [ 3072.582937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.583490] RIP: 0033:0x7f7b970cfb19 [ 3072.583889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.585879] RSP: 002b:00007f7b94645188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3072.586698] RAX: ffffffffffffffda RBX: 00007f7b971e2f60 RCX: 00007f7b970cfb19 [ 3072.587461] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 3072.588223] RBP: 00007f7b946451d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.588990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.589756] R13: 00007ffdba2b414f R14: 00007f7b94645300 R15: 0000000000022000 17:28:33 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 22) 17:28:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000020000000000000053787b508f4933eceb490d51f4c726ee48eee99d668af16cb46efa384d88a673c940c5189e71758412f4b54056d62f2d9db1937b9f994e8bdb1d21691c8cd1141bd0026309a6ee98555806b5e7b9c5e49174c9adae3e7a485ed9"]) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000700)=[&(0x7f0000000240)='/{]\x00', &(0x7f0000000600)='\x00'], &(0x7f00000008c0), 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r5 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r9}}, 0x1) [ 3072.632878] 9pnet: Insufficient options for proto=fd 17:28:33 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3072.731758] 9pnet: Insufficient options for proto=fd [ 3072.743747] FAULT_INJECTION: forcing a failure. [ 3072.743747] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.746305] CPU: 1 PID: 15163 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3072.747870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.749743] Call Trace: [ 3072.750345] dump_stack+0x107/0x167 [ 3072.751170] should_fail.cold+0x5/0xa [ 3072.752026] ? create_object.isra.0+0x3a/0xa30 [ 3072.753061] should_failslab+0x5/0x20 [ 3072.753918] kmem_cache_alloc+0x5b/0x310 [ 3072.754835] create_object.isra.0+0x3a/0xa30 [ 3072.755815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.756965] kmem_cache_alloc+0x159/0x310 [ 3072.757896] alloc_pid+0xd7/0xd30 [ 3072.758682] ? copy_namespaces+0x1ca/0x4f0 [ 3072.759638] copy_process+0x3b8b/0x78b0 [ 3072.760544] ? stack_trace_save+0x8c/0xc0 [ 3072.761493] ? __cleanup_sighand+0xb0/0xb0 [ 3072.762442] ? kernel_text_address+0xf2/0x120 [ 3072.763451] ? find_held_lock+0x2c/0x110 [ 3072.764389] ? io_uring_setup+0x1c23/0x2980 [ 3072.765342] ? lock_downgrade+0x6d0/0x6d0 [ 3072.766276] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3072.767369] create_io_thread+0xb6/0xf0 [ 3072.768273] ? pidfd_prepare+0x80/0x80 [ 3072.769150] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 3072.770263] io_uring_setup+0x1d79/0x2980 [ 3072.771202] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3072.772343] ? wait_for_completion_io+0x270/0x270 [ 3072.773451] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.774619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.775778] do_syscall_64+0x33/0x40 [ 3072.776630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.777777] RIP: 0033:0x7f15cb12cb19 [ 3072.778609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.782708] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3072.784429] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3072.786022] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3072.787608] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3072.789218] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3072.790803] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3072.845880] 9pnet: Insufficient options for proto=fd [ 3072.862663] 9pnet: Insufficient options for proto=fd 17:28:48 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40180004, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:28:48 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x11d, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:28:48 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 23) 17:28:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1d) 17:28:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, 0xc}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x3}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:28:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000004, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x0, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) open$dir(&(0x7f00000006c0)='./file0\x00', 0x1, 0x1d5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="010000ec388a0429a5b2232f656e83db8be236f0e2026425d80d1ec4637279707465645f6469721c"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x280008, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c616e616d653d002c6e6f6465766d61702c76657273696f6e3d3970327030302e752c636f6e746578743d756e636f6e66696e65645f752c736d61636b66737472616e766d7574653d002c646f6e745f686173682c66736d616769633d3078303030303030303030303030303030392c61756469742c00bc9ccbe74a"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) utimensat(r0, &(0x7f0000000600)='mnt/encrypted_dir\x00', &(0x7f0000000680)={{0x0, 0x2710}, {0x77359400}}, 0x0) 17:28:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x60) 17:28:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000600)='mnt/encrypted_dir\x00', 0x0, 0x0, 0x0, 0x880000, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x51025, 0x0, 0x1fe, 0x0, 0x4, 0xfffffffb, 0xb4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x80003872, &(0x7f0000000700)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='tOans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000680)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x3, 0x7f, "07e1855ec69fac9ddb73457ec2e61d62de396062f655812460113a46e44dd93c6154da94ee8a27b5e34b179f5a5c77fab3c4ca88d41ac91dcdf08a3fd19ccc", 0x11}}, 0x8001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x1) [ 3088.272678] FAULT_INJECTION: forcing a failure. [ 3088.272678] name failslab, interval 1, probability 0, space 0, times 0 [ 3088.274879] CPU: 0 PID: 15180 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3088.276172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3088.277730] Call Trace: [ 3088.278224] dump_stack+0x107/0x167 [ 3088.278906] should_fail.cold+0x5/0xa [ 3088.279631] ? io_uring_alloc_task_context+0x99/0x6a0 [ 3088.280607] should_failslab+0x5/0x20 [ 3088.281316] kmem_cache_alloc_trace+0x55/0x320 [ 3088.282338] io_uring_alloc_task_context+0x99/0x6a0 [ 3088.283280] ? io_import_iovec+0x1120/0x1120 [ 3088.284124] io_uring_setup+0x1dd1/0x2980 [ 3088.284914] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3088.285865] ? wait_for_completion_io+0x270/0x270 [ 3088.286782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3088.287763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3088.288732] do_syscall_64+0x33/0x40 [ 3088.288750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3088.288761] RIP: 0033:0x7f15cb12cb19 [ 3088.288776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3088.288785] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3088.288803] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3088.288813] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3088.288822] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3088.288831] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3088.288841] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3088.327390] 9pnet: Insufficient options for proto=fd [ 3088.377219] 9pnet: Insufficient options for proto=fd 17:29:04 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 24) 17:29:04 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x129, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3103.282993] FAULT_INJECTION: forcing a failure. [ 3103.282993] name failslab, interval 1, probability 0, space 0, times 0 17:29:04 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182302, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:29:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f0000000540)='./file0\x00', 0xa8d, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x100, 0xffffffffffffffff}, 0x50008, 0x0, 0x1fe, 0x8, 0x0, 0xfffffffb, 0xb4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100f4ff17000000", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x6b3d, &(0x7f0000000680)={0x0, 0x0, 0x10, 0x80000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="8de019ff000a000000000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e63727f707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616efc2e783fbff6631f6e5e00468583065a727218d83c8f9b1577b81af8895d69e763c7cd121a6f3ac9fbfe5a45c9c1c4b35145b4c6bb6d57d68fee0cd53025cd9f3c031c0bbc63c13c114b5220114cd0562be27cde964fc9719c0d846d95c8f3069698d3acfb4456da34dcced1d54c61f1fc5c5d983276678d901d98a12987025d778d7b15fe895e1fc4021a55f3d9100405cc6bf7b28bd31ee9dbd2590239614b0c564e4767ceb537ea42c47fed12831bcaa9766437e4e009c746570614927fc0e10fe17126508e09331d5dc4000000000000000000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6e6f6465766d61702c616e616d653d002c6e6f6465768f7273696f6e3d3970323030302e752c636f6e746578743d756e636f6e66696e65645f752c736d61636b66737472616e"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:29:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0x3ff, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x386f, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10, 0x1, 0x279}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000780)=0x0, &(0x7f0000000740)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) rename(&(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='mnt/encrypted_dir/file0\x00') mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c779b0000003d", @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="050020000000006c6d6eac83c126027200"]) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f0000000680)='\x00', 0x0, r1) 17:29:04 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000600)=@sg0, &(0x7f0000000680)='mnt/encrypted_dir\x00', &(0x7f00000006c0)='openpromfs\x00', 0x800000, &(0x7f0000000700)='{&\'\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="01d5810100000000a2000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:29:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1e) 17:29:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x6f) [ 3103.285302] CPU: 1 PID: 15204 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3103.286614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3103.288350] Call Trace: [ 3103.288861] dump_stack+0x107/0x167 [ 3103.289470] should_fail.cold+0x5/0xa [ 3103.290125] ? create_object.isra.0+0x3a/0xa30 [ 3103.290944] should_failslab+0x5/0x20 [ 3103.291639] kmem_cache_alloc+0x5b/0x310 [ 3103.292340] create_object.isra.0+0x3a/0xa30 [ 3103.293109] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3103.294076] kmem_cache_alloc_trace+0x151/0x320 [ 3103.295080] io_uring_alloc_task_context+0x99/0x6a0 [ 3103.295951] ? io_import_iovec+0x1120/0x1120 [ 3103.296855] io_uring_setup+0x1dd1/0x2980 [ 3103.297669] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3103.298787] ? wait_for_completion_io+0x270/0x270 [ 3103.299732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3103.300827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3103.301959] do_syscall_64+0x33/0x40 [ 3103.302758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3103.303769] RIP: 0033:0x7f15cb12cb19 [ 3103.304493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3103.308360] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3103.310028] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3103.311575] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3103.312943] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3103.314657] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3103.315914] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3103.340651] 9pnet: Insufficient options for proto=fd [ 3103.353497] 9pnet: Insufficient options for proto=fd 17:29:04 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 25) [ 3103.378722] 9pnet: Insufficient options for proto=fd [ 3103.390593] 9pnet: Insufficient options for proto=fd 17:29:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) io_uring_setup(0x70f4, &(0x7f0000000680)={0x0, 0xf80d, 0x0, 0x0, 0x7, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:29:04 executing program 5: set_tid_address(&(0x7f0000000600)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000001000000180000388f3d4a1d99a3c400", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x22e5, &(0x7f00000006c0)={0x0, 0xfaeb, 0x0, 0x0, 0x260}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200d0c735ef1244b17eabc5708b7770ba0f0b228bcd0f0a213bbae6c51e36d9125ad516b5909ef0b12cc060e9a3527d30b1a88e9e7d12583bab4ff935eb9f64eb5b53ab16b24b9cb95a55590d9cab587fd130f9b4edb0836910acfe49bf63e0ea5e721696236e7a3e831967b2925d6c49833c78b92276592c05d183df2e9528fadb3675df8a9902f578ca59289fa9a7ed07ddd91fbb"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x8010) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) rename(&(0x7f0000000240)='./mnt\x00', &(0x7f0000000740)='./mnt\x00') syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:29:04 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) r7 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r7, 0xd200000000000000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3103.458270] FAULT_INJECTION: forcing a failure. [ 3103.458270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3103.460835] CPU: 1 PID: 15229 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3103.462145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3103.463659] Call Trace: [ 3103.464137] dump_stack+0x107/0x167 [ 3103.464902] should_fail.cold+0x5/0xa [ 3103.465754] __alloc_pages_nodemask+0x182/0x600 [ 3103.466722] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3103.468056] ? kmem_cache_alloc+0x301/0x310 [ 3103.469031] alloc_pages_current+0x187/0x280 [ 3103.470010] allocate_slab+0x26f/0x380 [ 3103.470886] ___slab_alloc+0x470/0x700 [ 3103.471744] ? create_object.isra.0+0x3a/0xa30 [ 3103.472741] ? fs_reclaim_acquire+0xa5/0x100 [ 3103.473720] ? create_object.isra.0+0x3a/0xa30 [ 3103.474728] ? kmem_cache_alloc+0x301/0x310 [ 3103.475677] kmem_cache_alloc+0x301/0x310 [ 3103.476617] create_object.isra.0+0x3a/0xa30 [ 3103.477576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3103.478696] kmem_cache_alloc_trace+0x151/0x320 [ 3103.479724] io_uring_alloc_task_context+0x99/0x6a0 [ 3103.480831] ? io_import_iovec+0x1120/0x1120 [ 3103.481814] io_uring_setup+0x1dd1/0x2980 [ 3103.482732] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3103.483837] ? wait_for_completion_io+0x270/0x270 [ 3103.484910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3103.486058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3103.486263] 9pnet: Insufficient options for proto=fd [ 3103.487170] do_syscall_64+0x33/0x40 [ 3103.487193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3103.487207] RIP: 0033:0x7f15cb12cb19 [ 3103.487229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3103.494447] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3103.496089] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3103.497632] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3103.499170] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3103.500712] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3103.502244] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3103.546491] 9pnet: Insufficient options for proto=fd [ 3103.573017] 9pnet: Insufficient options for proto=fd 17:29:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x70) [ 3103.580461] 9pnet: Insufficient options for proto=fd 17:29:04 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 26) [ 3103.616367] 9pnet: Insufficient options for proto=fd [ 3103.630223] FAULT_INJECTION: forcing a failure. [ 3103.630223] name failslab, interval 1, probability 0, space 0, times 0 [ 3103.631639] CPU: 0 PID: 15246 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3103.632419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3103.633356] Call Trace: [ 3103.633659] dump_stack+0x107/0x167 [ 3103.634070] should_fail.cold+0x5/0xa [ 3103.634501] ? create_object.isra.0+0x3a/0xa30 [ 3103.635018] should_failslab+0x5/0x20 [ 3103.635444] kmem_cache_alloc+0x5b/0x310 [ 3103.635902] create_object.isra.0+0x3a/0xa30 [ 3103.636399] kmemleak_alloc_percpu+0xa0/0x100 [ 3103.637032] pcpu_alloc+0x4e2/0x1240 [ 3103.637495] __percpu_counter_init+0x10d/0x2d0 [ 3103.638009] io_uring_alloc_task_context+0xcc/0x6a0 [ 3103.638571] ? io_import_iovec+0x1120/0x1120 [ 3103.639072] io_uring_setup+0x1dd1/0x2980 [ 3103.639542] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3103.640110] ? wait_for_completion_io+0x270/0x270 [ 3103.640675] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3103.641263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3103.641845] do_syscall_64+0x33/0x40 [ 3103.642290] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3103.642981] RIP: 0033:0x7f15cb12cb19 [ 3103.643400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3103.645471] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3103.646328] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3103.647126] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3103.647928] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3103.648741] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3103.649558] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:29:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x0, 0x8, 0x4, 0xfffffffb, 0xb4, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e63727970ae6fe1587465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000240)='mnt/encrypted_dir\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:29:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x21) 17:29:17 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x169, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:29:17 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182303, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:29:17 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000008c0)={0x24, 0x16, 0x1, 0x70bd2d, 0x25dfdbfc, {0xe}, [@typed={0x8, 0x79, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x53, 0x0, 0x0, @u32=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c041}, 0x8008800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f0000000580)='./file0\x00', 0xa8a, 0x0, 0x0, 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02001000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount(&(0x7f0000000540)=@filename='mnt/encrypted_dir/file0\x00', &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='ocfs2\x00', 0x2c0000, &(0x7f00000007c0)='\x00') mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6e6f6465766d616465766d61702c7665727415a6f6d56c3b73696f6e3d3970323056de30302e752c636f6e746578743d756e636f6e66f66c2ff4bbc7e9d8fdf472cc8e698f0a87e6ecd8f03961636b6673747261a60dfbdb74653d00f2e741834789b9626509dd92ad495b702d6b7c98"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000700)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) bind$unix(r5, &(0x7f0000000680)=@file={0x0, 'mnt/encrypted_dir/file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10010, r7, 0x0) 17:29:17 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 27) 17:29:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x300) 17:29:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000008100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_complete(r3) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd_index=0x8, 0x100000000, &(0x7f0000000600)=[{&(0x7f0000000680)="8b4253e4bde1bbd6fa98d129eb79563099144bd51cc9b54805cdef11501c21896f77d79888acc61987d16739f8c21944a6a1677a904fe42ea2cb1abd52f61aacf93c1975d708d021cf3a078998acfb0ad3f2382827601c225cc4b3240a5a2fa918a401669428fcd534d836055cd2c4c94fd0edb8a0d2d87315df6a80f896e9221c584af5e5fce7c799c0bb8cc9979bb7aa4e250dcf0b2c35de1a1e2a2cf66ee251e5f7d51cccb2d157d792efef55a36111ed2fee9bd29f9f7901ace1910de223abf9584e637d35dc38795ff325a3f6e1ac8f", 0xd2}], 0x1, 0x4, 0x0, {0x3}}, 0x1) [ 3116.364909] 9pnet: Insufficient options for proto=fd [ 3116.366691] FAULT_INJECTION: forcing a failure. [ 3116.366691] name failslab, interval 1, probability 0, space 0, times 0 [ 3116.368315] CPU: 1 PID: 15264 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3116.369175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3116.370197] Call Trace: [ 3116.370551] dump_stack+0x107/0x167 [ 3116.370998] should_fail.cold+0x5/0xa [ 3116.371474] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 3116.372120] should_failslab+0x5/0x20 [ 3116.372593] kmem_cache_alloc_trace+0x55/0x320 [ 3116.373162] io_uring_alloc_task_context+0x4a3/0x6a0 [ 3116.373785] ? io_import_iovec+0x1120/0x1120 [ 3116.374337] io_uring_setup+0x1dd1/0x2980 [ 3116.374856] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3116.375485] ? wait_for_completion_io+0x270/0x270 [ 3116.376099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3116.376760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3116.377390] do_syscall_64+0x33/0x40 [ 3116.377845] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3116.378468] RIP: 0033:0x7f15cb12cb19 [ 3116.378921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3116.381152] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3116.382074] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3116.382947] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3116.383819] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3116.384682] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3116.385563] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:29:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x0, 0x8, 0x4, 0xfffffffb, 0xb4, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e63727970ae6fe1587465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000240)='mnt/encrypted_dir\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3116.452814] 9pnet: Insufficient options for proto=fd [ 3116.485657] 9pnet: Insufficient options for proto=fd 17:29:17 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 28) [ 3116.515877] 9pnet: Insufficient options for proto=fd [ 3116.535727] FAULT_INJECTION: forcing a failure. [ 3116.535727] name failslab, interval 1, probability 0, space 0, times 0 [ 3116.538422] CPU: 0 PID: 15282 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3116.540046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3116.541924] Call Trace: [ 3116.542533] dump_stack+0x107/0x167 [ 3116.543364] should_fail.cold+0x5/0xa [ 3116.544231] ? create_object.isra.0+0x3a/0xa30 [ 3116.545282] should_failslab+0x5/0x20 [ 3116.546146] kmem_cache_alloc+0x5b/0x310 [ 3116.547084] create_object.isra.0+0x3a/0xa30 [ 3116.548092] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3116.549269] kmem_cache_alloc_trace+0x151/0x320 [ 3116.550335] io_uring_alloc_task_context+0x4a3/0x6a0 [ 3116.551494] ? io_import_iovec+0x1120/0x1120 [ 3116.552516] io_uring_setup+0x1dd1/0x2980 [ 3116.553469] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3116.554613] ? wait_for_completion_io+0x270/0x270 [ 3116.555725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3116.556924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3116.558096] do_syscall_64+0x33/0x40 [ 3116.558941] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3116.560105] RIP: 0033:0x7f15cb12cb19 [ 3116.560955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3116.565129] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3116.566859] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3116.568477] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3116.570095] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3116.571702] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3116.573318] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3116.583388] 9pnet: Insufficient options for proto=fd 17:29:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, 0x0) mount$cgroup2(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x72802, &(0x7f00000007c0)={[{@memory_localevents}, {@subsystem='freezer'}], [{@uid_gt}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@seclabel}, {@euid_gt}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mount(&(0x7f0000000600)=@nullb, &(0x7f0000000680)='mnt/encrypted_dir\x00', &(0x7f00000006c0)='erofs\x00', 0x910ab8, &(0x7f0000000700)='unconfined_u') syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:29:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000ce09f45dba30b39a37f57435c711996879f186c7a681038b1ce4444cdcd92385347662bf0c4c7dd3edb61bb74465148706e45faf680c88846fa47133e6830536d6013112385739c30ed0b2cb64dec589d868366b0eecacd1ea44cc5d83e870a201f0027278c83ef5a59fecc49a130224d801bec9b7fe6a1dff6baccdb0aa538045ea71018ea90f537986fd80a873906865ca7294daefbf4b57403163e8ce9838a49e1f0482bc047815065597f8b788e671d2d7525e950e473c583a324605269a2240", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="747f616e733d66640f7266646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r10, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x1) 17:29:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000d7fae9c2021c1fcc5251bd93c0198d4ceaddd927bd1213e79418e74041221741d5f3aee7283b5178fbb81a3bdf2ffa291aa0921d2e1697286d394884c808af2aa5b6b2f19674a166ee31a12a541b77c231", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:29:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x23) 17:29:17 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 29) [ 3116.744591] FAULT_INJECTION: forcing a failure. [ 3116.744591] name failslab, interval 1, probability 0, space 0, times 0 [ 3116.747239] CPU: 0 PID: 15300 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3116.748800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3116.750648] Call Trace: [ 3116.751237] dump_stack+0x107/0x167 [ 3116.752048] should_fail.cold+0x5/0xa [ 3116.752918] ? io_wq_create+0xeb/0xc00 [ 3116.753788] should_failslab+0x5/0x20 [ 3116.754638] __kmalloc+0x72/0x390 [ 3116.755416] io_wq_create+0xeb/0xc00 [ 3116.756252] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3116.757392] ? io_import_iovec+0x1120/0x1120 [ 3116.758372] ? io_apoll_task_func+0x2d0/0x2d0 [ 3116.759380] ? __io_req_find_next+0x300/0x300 [ 3116.760386] io_uring_setup+0x1dd1/0x2980 [ 3116.761335] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3116.762469] ? wait_for_completion_io+0x270/0x270 [ 3116.763567] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3116.764748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3116.765913] do_syscall_64+0x33/0x40 [ 3116.766750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3116.767890] RIP: 0033:0x7f15cb12cb19 [ 3116.768718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3116.772849] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3116.774544] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3116.776144] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3116.777749] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3116.779335] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3116.780937] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3116.791561] 9pnet: Insufficient options for proto=fd 17:29:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x3e7) [ 3116.830449] 9pnet: Insufficient options for proto=fd [ 3116.897717] 9pnet: Insufficient options for proto=fd 17:29:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x2080}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:29:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x500) 17:29:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(r0, &(0x7f0000000680)='./mnt\x00', 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mknodat(r2, &(0x7f0000000600)='./mnt\x00', 0xc000, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:29:31 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182304, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:29:31 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x18a, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:29:31 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 30) 17:29:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="014800000100009b8fffff00", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200667e154ef4802d5c1a01183af4fd987961822ea8efde8b52223d79ef13ffb4a0713dd5d9f804d0348a1f62d960a59a9c25c128b5b015fa6bc7f20b0c"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="7472716e733d66645a00010400003d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = accept(r5, &(0x7f0000000680)=@caif=@dbg, &(0x7f0000000600)=0x80) ppoll(&(0x7f0000000700)=[{r10, 0x1400}], 0x1, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f0000000780)={[0x7]}, 0x8) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:29:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xcf) [ 3130.259201] FAULT_INJECTION: forcing a failure. [ 3130.259201] name failslab, interval 1, probability 0, space 0, times 0 [ 3130.260696] CPU: 0 PID: 15319 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3130.261608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3130.262672] Call Trace: [ 3130.263021] dump_stack+0x107/0x167 [ 3130.263474] should_fail.cold+0x5/0xa [ 3130.263979] ? create_object.isra.0+0x3a/0xa30 [ 3130.264572] should_failslab+0x5/0x20 [ 3130.265100] kmem_cache_alloc+0x5b/0x310 [ 3130.265628] create_object.isra.0+0x3a/0xa30 [ 3130.266184] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3130.266836] __kmalloc+0x16e/0x390 [ 3130.267303] io_wq_create+0xeb/0xc00 [ 3130.267802] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3130.268457] ? io_import_iovec+0x1120/0x1120 [ 3130.269040] ? io_apoll_task_func+0x2d0/0x2d0 [ 3130.269631] ? __io_req_find_next+0x300/0x300 [ 3130.270212] io_uring_setup+0x1dd1/0x2980 [ 3130.270750] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3130.271399] ? wait_for_completion_io+0x270/0x270 [ 3130.272049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3130.272853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3130.273668] do_syscall_64+0x33/0x40 [ 3130.274238] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3130.275004] RIP: 0033:0x7f15cb12cb19 [ 3130.275488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3130.277903] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3130.278873] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3130.279801] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3130.280711] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3130.281646] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3130.282640] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3130.364282] 9pnet: Insufficient options for proto=fd 17:29:31 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 31) [ 3130.385350] 9pnet: Insufficient options for proto=fd [ 3130.440440] 9pnet: Insufficient options for proto=fd [ 3130.474888] 9pnet: Insufficient options for proto=fd [ 3130.487520] FAULT_INJECTION: forcing a failure. [ 3130.487520] name failslab, interval 1, probability 0, space 0, times 0 [ 3130.490550] CPU: 1 PID: 15336 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3130.492011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3130.493801] Call Trace: [ 3130.494362] dump_stack+0x107/0x167 [ 3130.495131] should_fail.cold+0x5/0xa [ 3130.496054] ? io_wq_create+0x6ef/0xc00 [ 3130.497053] should_failslab+0x5/0x20 [ 3130.498011] kmem_cache_alloc_node_trace+0x59/0x340 [ 3130.499262] io_wq_create+0x6ef/0xc00 [ 3130.500228] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3130.501500] ? io_import_iovec+0x1120/0x1120 [ 3130.502607] ? io_apoll_task_func+0x2d0/0x2d0 [ 3130.503735] ? __io_req_find_next+0x300/0x300 [ 3130.504873] io_uring_setup+0x1dd1/0x2980 [ 3130.505931] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3130.507202] ? wait_for_completion_io+0x270/0x270 [ 3130.508439] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3130.509768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3130.511067] do_syscall_64+0x33/0x40 [ 3130.512004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3130.513299] RIP: 0033:0x7f15cb12cb19 [ 3130.514227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3130.518852] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3130.520743] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3130.522519] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3130.524319] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3130.526112] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3130.527900] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:29:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x1776, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x384}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_setup(0xb43, &(0x7f0000000740)={0x0, 0xc355, 0x10, 0x2, 0xbe, 0x0, r5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)=0x0) r11 = syz_open_dev$vcsu(&(0x7f0000000840), 0x5, 0x400000) syz_io_uring_submit(0x0, r10, &(0x7f0000000cc0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4000, @fd=r11, 0x31, &(0x7f0000000c40)=[{&(0x7f0000000880)="ae344ab9346eb6e728e43c949d31d842005739d17a25ae781959dfde0a12d586a49751510bd9baef8654aec023321dedcea36ed6d9338b3fd3c7a47282355636ba06a364d6b9ea557a7d0d689b7d853c9e745769c7842ae7d292019b292c6f2f14e0214e35a9e3098f9a770e7890cccac449f74ed0494f05eb6a9136cb664a1d8fd013662b9eae81badb2b325dc271bc1412d12cd0033dd9942967f676781b7b77278fd2926a2f95d580f8cade41ff50c240e5c250eb7fee14c7ce1d128494f02b85bb1cc1c22c8ae05d990015", 0xcd}, {&(0x7f0000000980)="6a4f50188fba56b9625d0c288c6ccde8102f574d6bdbda7db14619115d9fd4807c4bebe98dab5c4df30da75386600ee5410126f5b54d2bab66911c933efec526c0a6e7aae0e578ae618708dd0dd33aeb4adbc8f8d080462ef5153bba7c4cb9", 0x5f}, {&(0x7f0000000a00)="09b4474548b241860c90e0a4056690d43f9c2536fa086bcbbae3dad728c1172de96c34f2aaf098b35b74e06b8be6906afafcfea41289e36092ba4612505c5ebd9dd45371feba4eb2c251980f0e6ef7465b3257a3a5e59e62eae1c9ad8a5bd98a527f771d7059b35543fe279a22f65c0eafd146829679ab4940d788544bd8bb0ef1adb2ba8d791b3c70a7cb6976d606eb2b3f8e6e74ba8047670e38fbe8", 0x9d}, {&(0x7f0000000ac0)="323af96ce39cd675aae7b4164a6f6f15ef5ebe11d1873a453b1f2f633b90c5d2c02a6934c887aafcd90b316b01e89025ff831d520a69a1f30b1fc21affa7f4afe4f65a4c41753632f9de64f7f4214ebde3d2e5c7e20e1ccc1fb16e6bf1009d01032f5923b725d75da842fca9a091d24986a5cc10c356890ae450dbcd5d66d0b01ea9", 0x82}, {&(0x7f0000000b80)="ad0e23b7b03dd8a5d6f562e61edaeadad3d5d547f9a5b8ad8b3eca3c7522ad1d2be2c23f9ccd1c99f5f3b00ea8ad0d61850efd73e683b5fddc12651c3465e2e279ad42d56c1720e445627def28386273ead6c0bedf7cacd7c16bb4787655706a680cade56903f88460b9dc5d275696c31c13934ae93898343a1ffd3afc88dd736025117e3374821877f90de95dd8a7ee9d7801a707a925d25e814041bf62fbeb66b1a23cb1974bdeb3b854a45294", 0xae}], 0x5, 0x38, 0x1}, 0xc7) 17:29:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500), 0x8}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:29:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'rfdno'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) truncate(&(0x7f0000000540)='./mnt\x00', 0xffff) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) [ 3130.673894] 9pnet: Insufficient options for proto=fd [ 3130.694798] 9pnet: Insufficient options for proto=fd [ 3130.695456] 9pnet: Insufficient options for proto=fd [ 3130.713688] 9pnet: Insufficient options for proto=fd 17:29:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xd0) 17:29:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x600) [ 3130.763618] 9pnet: Insufficient options for proto=fd 17:29:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x3178008, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000800000000006d6ebd612e27dc7430a53625825df42f036e"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) umount2(&(0x7f0000000600)='./mnt\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x6b8f, &(0x7f00000002c0)={0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:29:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') open$dir(&(0x7f0000000600)='./file0\x00', 0x800, 0xb1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x386e, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:29:31 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 32) 17:29:31 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x1d4, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:29:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) mkdirat(r0, &(0x7f0000000600)='./file1\x00', 0x144) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000680)={0x0, 'ip6_vti0\x00', {0x4}}) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:29:31 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182305, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3130.957300] FAULT_INJECTION: forcing a failure. [ 3130.957300] name failslab, interval 1, probability 0, space 0, times 0 [ 3130.960275] CPU: 1 PID: 15363 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3130.962012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3130.964081] Call Trace: [ 3130.964753] dump_stack+0x107/0x167 [ 3130.965673] should_fail.cold+0x5/0xa [ 3130.966631] ? create_object.isra.0+0x3a/0xa30 [ 3130.967771] should_failslab+0x5/0x20 [ 3130.968730] kmem_cache_alloc+0x5b/0x310 [ 3130.969759] ? io_wq_create+0x114/0xc00 [ 3130.970761] create_object.isra.0+0x3a/0xa30 [ 3130.971856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3130.973142] kmem_cache_alloc_node_trace+0x16d/0x340 [ 3130.974417] io_wq_create+0x6ef/0xc00 [ 3130.975378] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3130.976642] ? io_import_iovec+0x1120/0x1120 [ 3130.977749] ? io_apoll_task_func+0x2d0/0x2d0 [ 3130.978854] ? __io_req_find_next+0x300/0x300 [ 3130.979982] io_uring_setup+0x1dd1/0x2980 [ 3130.981016] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3130.982259] ? wait_for_completion_io+0x270/0x270 [ 3130.983474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3130.984775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3130.986057] do_syscall_64+0x33/0x40 [ 3130.986979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3130.988238] RIP: 0033:0x7f15cb12cb19 [ 3130.989163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3130.993702] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3130.995593] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3130.997352] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3130.999100] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3131.000838] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3131.002620] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3131.024274] 9pnet: Insufficient options for proto=fd [ 3131.078599] 9pnet: Insufficient options for proto=fd [ 3131.099889] 9pnet: Insufficient options for proto=fd [ 3131.138481] 9pnet: Insufficient options for proto=fd [ 3131.150674] 9pnet: Insufficient options for proto=fd 17:29:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 1) 17:29:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="ee93fd6556edf5c0a30b1b8e538a891c8db15201226b60eb4e456826af4454e2fc73ffffff000000000793682b0000000000", @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:29:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x700) [ 3131.218781] 9pnet: Insufficient options for proto=fd [ 3131.228453] 9pnet: Insufficient options for proto=fd [ 3131.258140] FAULT_INJECTION: forcing a failure. [ 3131.258140] name failslab, interval 1, probability 0, space 0, times 0 [ 3131.260150] CPU: 0 PID: 15379 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3131.261362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3131.262830] Call Trace: [ 3131.263295] dump_stack+0x107/0x167 [ 3131.263940] should_fail.cold+0x5/0xa [ 3131.264611] ? __do_sys_memfd_create+0xfb/0x450 [ 3131.265431] should_failslab+0x5/0x20 [ 3131.266097] __kmalloc+0x72/0x390 [ 3131.266706] __do_sys_memfd_create+0xfb/0x450 [ 3131.267473] ? ksys_write+0x1a9/0x260 [ 3131.268168] ? memfd_file_seals_ptr+0x170/0x170 [ 3131.268995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3131.269923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3131.270824] do_syscall_64+0x33/0x40 [ 3131.271480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3131.272367] RIP: 0033:0x7fcd90ea5b19 [ 3131.273025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3131.276235] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3131.277578] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3131.278842] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3131.280099] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3131.281346] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 17:29:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) mkdirat(r1, &(0x7f0000000600)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x45bc95775bb182df, r0, {0x7f}}, './file0\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x1}}, 'mnt/encrypted_dir\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r10, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x1) [ 3131.282582] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 [ 3131.379403] 9pnet: Insufficient options for proto=fd [ 3131.403367] 9pnet: Insufficient options for proto=fd 17:29:46 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182306, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:29:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xe0) 17:29:46 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x1f9, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:29:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 2) 17:29:46 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 33) 17:29:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x2e0c, &(0x7f0000000680)={0x0, 0x0, 0x1, 0x0, 0x306}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:29:46 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mount(&(0x7f0000000600)=@md0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='cpuset\x00', 0x10008, &(0x7f0000000700)='smackfstransmute') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r11}}, 0x1) 17:29:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x900) [ 3145.892455] FAULT_INJECTION: forcing a failure. [ 3145.892455] name failslab, interval 1, probability 0, space 0, times 0 [ 3145.895429] CPU: 1 PID: 15398 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3145.895441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3145.895448] Call Trace: [ 3145.895476] dump_stack+0x107/0x167 [ 3145.895502] should_fail.cold+0x5/0xa [ 3145.895528] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 3145.895549] should_failslab+0x5/0x20 [ 3145.895572] kmem_cache_alloc_trace+0x55/0x320 [ 3145.895601] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 3145.895626] io_uring_setup+0x14f6/0x2980 [ 3145.895663] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3145.910051] ? wait_for_completion_io+0x270/0x270 [ 3145.911432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3145.912774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3145.914268] do_syscall_64+0x33/0x40 [ 3145.915404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3145.916899] RIP: 0033:0x7f15cb12cb19 [ 3145.917868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3145.922481] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3145.924379] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3145.926111] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3145.927763] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3145.929445] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3145.931270] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3145.950132] FAULT_INJECTION: forcing a failure. [ 3145.950132] name failslab, interval 1, probability 0, space 0, times 0 [ 3145.952747] CPU: 1 PID: 15409 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3145.954250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3145.955990] Call Trace: [ 3145.956544] dump_stack+0x107/0x167 [ 3145.957330] should_fail.cold+0x5/0xa [ 3145.958150] ? create_object.isra.0+0x3a/0xa30 [ 3145.959135] should_failslab+0x5/0x20 [ 3145.959928] kmem_cache_alloc+0x5b/0x310 [ 3145.960779] create_object.isra.0+0x3a/0xa30 [ 3145.961702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3145.962775] __kmalloc+0x16e/0x390 [ 3145.963542] __do_sys_memfd_create+0xfb/0x450 [ 3145.964478] ? ksys_write+0x1a9/0x260 [ 3145.965294] ? memfd_file_seals_ptr+0x170/0x170 [ 3145.966276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3145.967374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3145.968457] do_syscall_64+0x33/0x40 [ 3145.969272] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3145.970378] RIP: 0033:0x7fcd90ea5b19 [ 3145.971177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3145.975087] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3145.976691] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3145.978244] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3145.979781] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3145.981321] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3145.982855] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 [ 3145.994931] 9pnet: Insufficient options for proto=fd [ 3146.006497] loop5: detected capacity change from 0 to 2048 [ 3146.009922] cgroup: Unknown parameter 'smackfstransmute' [ 3146.023446] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3146.049765] 9pnet: Insufficient options for proto=fd [ 3146.053618] 9pnet: Insufficient options for proto=fd [ 3146.114484] cgroup: Unknown parameter 'smackfstransmute' [ 3146.121859] 9pnet: Insufficient options for proto=fd 17:30:00 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 34) 17:30:00 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182307, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3159.719818] FAULT_INJECTION: forcing a failure. [ 3159.719818] name failslab, interval 1, probability 0, space 0, times 0 [ 3159.722278] CPU: 1 PID: 15426 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3159.723755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3159.725519] Call Trace: [ 3159.726075] dump_stack+0x107/0x167 [ 3159.726859] should_fail.cold+0x5/0xa [ 3159.727692] ? create_object.isra.0+0x3a/0xa30 [ 3159.728681] should_failslab+0x5/0x20 [ 3159.729509] kmem_cache_alloc+0x5b/0x310 [ 3159.730380] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3159.731463] ? trace_hardirqs_on+0x5b/0x180 [ 3159.732393] create_object.isra.0+0x3a/0xa30 [ 3159.733351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3159.734452] kmem_cache_alloc_trace+0x151/0x320 [ 3159.735459] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 3159.736627] io_uring_setup+0x14f6/0x2980 [ 3159.737538] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3159.738611] ? wait_for_completion_io+0x270/0x270 [ 3159.739646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3159.740766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3159.741883] do_syscall_64+0x33/0x40 [ 3159.742680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3159.743777] RIP: 0033:0x7f15cb12cb19 [ 3159.744571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3159.748514] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3159.750146] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3159.751674] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3159.753198] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3159.754733] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3159.756262] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:30:00 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x2cc, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:00 executing program 2: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182305, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 3) 17:30:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000600), 0x19ab, 0x20300) syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) 17:30:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x300) 17:30:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xa00) [ 3159.769939] FAULT_INJECTION: forcing a failure. [ 3159.769939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3159.772630] CPU: 1 PID: 15438 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3159.774132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3159.776312] Call Trace: [ 3159.776883] dump_stack+0x107/0x167 [ 3159.777666] should_fail.cold+0x5/0xa [ 3159.778611] _copy_from_user+0x2e/0x1b0 [ 3159.779773] __do_sys_memfd_create+0x16d/0x450 [ 3159.780767] ? memfd_file_seals_ptr+0x170/0x170 [ 3159.781873] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3159.783131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3159.784531] do_syscall_64+0x33/0x40 [ 3159.785422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3159.786515] RIP: 0033:0x7fcd90ea5b19 [ 3159.787512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3159.791979] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3159.793747] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3159.795591] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3159.797207] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3159.799109] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3159.800796] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 [ 3159.862812] 9pnet: Insufficient options for proto=fd 17:30:00 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 35) [ 3159.900524] 9pnet: Insufficient options for proto=fd 17:30:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 4) [ 3159.958532] FAULT_INJECTION: forcing a failure. [ 3159.958532] name failslab, interval 1, probability 0, space 0, times 0 [ 3159.961026] CPU: 1 PID: 15446 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3159.962711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3159.964491] Call Trace: [ 3159.965055] dump_stack+0x107/0x167 [ 3159.965862] should_fail.cold+0x5/0xa [ 3159.966690] ? create_object.isra.0+0x3a/0xa30 [ 3159.967682] should_failslab+0x5/0x20 [ 3159.968490] kmem_cache_alloc+0x5b/0x310 [ 3159.969354] create_object.isra.0+0x3a/0xa30 [ 3159.970281] kmemleak_alloc_percpu+0xa0/0x100 [ 3159.971221] pcpu_alloc+0x4e2/0x1240 [ 3159.972019] ? io_async_queue_proc+0x80/0x80 [ 3159.972939] percpu_ref_init+0x31/0x3d0 [ 3159.973788] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3159.974923] io_uring_setup+0x14f6/0x2980 [ 3159.975793] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3159.976847] ? wait_for_completion_io+0x270/0x270 [ 3159.977889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3159.978990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3159.980103] do_syscall_64+0x33/0x40 [ 3159.980873] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3159.981949] RIP: 0033:0x7f15cb12cb19 [ 3159.982728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3159.986638] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3159.988258] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3159.989770] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3159.991247] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3159.992713] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3159.994205] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3160.019715] FAULT_INJECTION: forcing a failure. [ 3160.019715] name failslab, interval 1, probability 0, space 0, times 0 [ 3160.022203] CPU: 1 PID: 15449 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3160.023645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3160.025364] Call Trace: [ 3160.025921] dump_stack+0x107/0x167 [ 3160.026698] should_fail.cold+0x5/0xa [ 3160.027510] ? shmem_alloc_inode+0x18/0x40 [ 3160.028390] should_failslab+0x5/0x20 [ 3160.029194] kmem_cache_alloc+0x5b/0x310 [ 3160.030061] ? shmem_destroy_inode+0x70/0x70 [ 3160.030989] shmem_alloc_inode+0x18/0x40 [ 3160.031849] ? shmem_destroy_inode+0x70/0x70 [ 3160.032790] alloc_inode+0x63/0x240 [ 3160.033567] new_inode+0x23/0x250 [ 3160.034318] shmem_get_inode+0x15e/0xbc0 [ 3160.035186] __shmem_file_setup+0xb8/0x320 [ 3160.036074] ? _copy_from_user+0xfb/0x1b0 [ 3160.036952] __do_sys_memfd_create+0x275/0x450 [ 3160.037927] ? memfd_file_seals_ptr+0x170/0x170 [ 3160.038912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3160.040003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3160.041084] do_syscall_64+0x33/0x40 [ 3160.041874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3160.042941] RIP: 0033:0x7fcd90ea5b19 [ 3160.043727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3160.047572] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3160.049180] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3160.050702] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3160.052184] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3160.053679] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3160.055175] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 17:30:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x1, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', &(0x7f0000000680)={0x100, 0x40, 0xd}, 0x18) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472854d733d66642c7266646e6f3d7e7f4738091aeea3244d2360aff28ff061b6097a8f21c0bee141f96a361c2fad8eb370e960796589183a3819a33166b14c49adef6b6a21e7efec3ed0fbdfdf1a", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:30:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xb00) 17:30:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x3e7) 17:30:00 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 36) 17:30:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 5) [ 3160.296987] FAULT_INJECTION: forcing a failure. [ 3160.296987] name failslab, interval 1, probability 0, space 0, times 0 [ 3160.300380] CPU: 1 PID: 15462 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3160.302154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3160.304257] Call Trace: [ 3160.304916] dump_stack+0x107/0x167 [ 3160.305837] should_fail.cold+0x5/0xa [ 3160.306807] ? create_object.isra.0+0x3a/0xa30 [ 3160.307959] should_failslab+0x5/0x20 [ 3160.308906] kmem_cache_alloc+0x5b/0x310 [ 3160.309958] create_object.isra.0+0x3a/0xa30 [ 3160.311080] kmemleak_alloc_percpu+0xa0/0x100 [ 3160.312203] pcpu_alloc+0x4e2/0x1240 [ 3160.313152] ? io_async_queue_proc+0x80/0x80 [ 3160.314263] percpu_ref_init+0x31/0x3d0 [ 3160.315286] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3160.316648] io_uring_setup+0x14f6/0x2980 [ 3160.317711] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3160.318975] ? wait_for_completion_io+0x270/0x270 [ 3160.320212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3160.321531] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3160.322833] do_syscall_64+0x33/0x40 [ 3160.323783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3160.325079] RIP: 0033:0x7f15cb12cb19 [ 3160.326026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3160.330631] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3160.332535] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3160.334307] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3160.336096] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3160.337874] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3160.339659] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3160.377622] FAULT_INJECTION: forcing a failure. [ 3160.377622] name failslab, interval 1, probability 0, space 0, times 0 [ 3160.380820] CPU: 1 PID: 15467 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3160.382894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3160.385044] Call Trace: [ 3160.385785] dump_stack+0x107/0x167 [ 3160.386836] should_fail.cold+0x5/0xa [ 3160.387859] ? create_object.isra.0+0x3a/0xa30 [ 3160.389058] should_failslab+0x5/0x20 [ 3160.390126] kmem_cache_alloc+0x5b/0x310 [ 3160.391168] create_object.isra.0+0x3a/0xa30 [ 3160.392315] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3160.393644] kmem_cache_alloc+0x159/0x310 [ 3160.394874] ? shmem_destroy_inode+0x70/0x70 [ 3160.395982] shmem_alloc_inode+0x18/0x40 [ 3160.397075] ? shmem_destroy_inode+0x70/0x70 [ 3160.398335] alloc_inode+0x63/0x240 [ 3160.399248] new_inode+0x23/0x250 [ 3160.400165] shmem_get_inode+0x15e/0xbc0 [ 3160.401159] __shmem_file_setup+0xb8/0x320 [ 3160.402188] ? _copy_from_user+0xfb/0x1b0 [ 3160.403269] __do_sys_memfd_create+0x275/0x450 [ 3160.404575] ? memfd_file_seals_ptr+0x170/0x170 [ 3160.405801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3160.407220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3160.408571] do_syscall_64+0x33/0x40 [ 3160.409565] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3160.410996] RIP: 0033:0x7fcd90ea5b19 [ 3160.411988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3160.416455] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3160.418321] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3160.420068] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3160.421805] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3160.423562] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3160.425295] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 17:30:01 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182308, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:01 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x2de, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:01 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x44) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000740)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="03000000000000006d6e637279707465645f3893dc64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x1}}, 'mnt/encrypted_dir\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) 17:30:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xa00) 17:30:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xc00) [ 3160.540686] loop5: detected capacity change from 0 to 2048 [ 3160.549663] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:30:15 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x2f0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:15 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x4018230a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xd00) 17:30:15 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 37) 17:30:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 6) 17:30:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000600)=ANY=[@ANYRES16=r4, @ANYRES64, @ANYRES64]) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) open_tree(r6, &(0x7f00000000c0)='./file0\x00', 0x1000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000480)={0x70002000}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='o=\x00\x00\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:30:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x12, 0x0, &(0x7f0000000c80)) (fail_nth: 1) 17:30:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x500) [ 3174.782673] FAULT_INJECTION: forcing a failure. [ 3174.782673] name failslab, interval 1, probability 0, space 0, times 0 [ 3174.785181] CPU: 1 PID: 15500 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3174.785616] FAULT_INJECTION: forcing a failure. [ 3174.785616] name failslab, interval 1, probability 0, space 0, times 0 [ 3174.786677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3174.786683] Call Trace: [ 3174.786708] dump_stack+0x107/0x167 [ 3174.786730] should_fail.cold+0x5/0xa [ 3174.791904] ? security_inode_alloc+0x34/0x160 [ 3174.792892] should_failslab+0x5/0x20 [ 3174.793726] kmem_cache_alloc+0x5b/0x310 [ 3174.794614] security_inode_alloc+0x34/0x160 [ 3174.795567] inode_init_always+0xa4e/0xd10 [ 3174.796480] ? shmem_destroy_inode+0x70/0x70 [ 3174.797441] alloc_inode+0x84/0x240 [ 3174.798225] new_inode+0x23/0x250 [ 3174.798983] shmem_get_inode+0x15e/0xbc0 [ 3174.799866] __shmem_file_setup+0xb8/0x320 [ 3174.800779] ? _copy_from_user+0xfb/0x1b0 [ 3174.801691] __do_sys_memfd_create+0x275/0x450 [ 3174.802677] ? memfd_file_seals_ptr+0x170/0x170 [ 3174.803687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3174.804818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3174.805949] do_syscall_64+0x33/0x40 [ 3174.806756] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3174.807861] RIP: 0033:0x7fcd90ea5b19 [ 3174.808664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3174.812661] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3174.814306] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3174.815850] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3174.817394] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3174.818952] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3174.820493] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 [ 3174.822068] CPU: 0 PID: 15497 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3174.822943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3174.823968] Call Trace: [ 3174.824287] dump_stack+0x107/0x167 [ 3174.824711] should_fail.cold+0x5/0xa [ 3174.825156] ? percpu_ref_init+0xd8/0x3d0 [ 3174.825644] should_failslab+0x5/0x20 [ 3174.826088] kmem_cache_alloc_trace+0x55/0x320 [ 3174.826617] ? io_async_queue_proc+0x80/0x80 [ 3174.827126] percpu_ref_init+0xd8/0x3d0 [ 3174.827591] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3174.828218] io_uring_setup+0x14f6/0x2980 [ 3174.828705] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3174.829295] ? wait_for_completion_io+0x270/0x270 [ 3174.829875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3174.830489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3174.831088] do_syscall_64+0x33/0x40 [ 3174.831522] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3174.832116] RIP: 0033:0x7f15cb12cb19 [ 3174.832548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3174.834676] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3174.835742] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3174.836580] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3174.837409] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3174.838232] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3174.839057] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3174.868108] FAULT_INJECTION: forcing a failure. [ 3174.868108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3174.871103] CPU: 1 PID: 15506 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 3174.872847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3174.874684] Call Trace: [ 3174.875242] dump_stack+0x107/0x167 [ 3174.876005] should_fail.cold+0x5/0xa [ 3174.876802] _copy_to_user+0x2e/0x180 [ 3174.877698] simple_read_from_buffer+0xcc/0x160 [ 3174.878874] proc_fail_nth_read+0x198/0x230 [ 3174.879878] ? proc_sessionid_read+0x230/0x230 [ 3174.880825] ? security_file_permission+0xb1/0xe0 [ 3174.881849] ? proc_sessionid_read+0x230/0x230 [ 3174.882800] vfs_read+0x228/0x620 [ 3174.883703] ksys_read+0x12d/0x260 [ 3174.884559] ? vfs_write+0xb10/0xb10 [ 3174.885459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3174.886549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3174.887633] do_syscall_64+0x33/0x40 [ 3174.888504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3174.889800] RIP: 0033:0x7f2e9685469c [ 3174.890676] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3174.894903] RSP: 002b:00007f2e93e17170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3174.896504] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f2e9685469c [ 3174.898263] RDX: 000000000000000f RSI: 00007f2e93e171e0 RDI: 0000000000000005 [ 3174.899793] RBP: 00007f2e93e171d0 R08: 0000000000000000 R09: 0000000000000000 [ 3174.901378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3174.903166] R13: 00007ffc42414e0f R14: 00007f2e93e17300 R15: 0000000000022000 [ 3174.915431] 9pnet: Insufficient options for proto=fd 17:30:15 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x300, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:15 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 38) [ 3174.948796] 9pnet: Insufficient options for proto=fd [ 3174.978384] FAULT_INJECTION: forcing a failure. [ 3174.978384] name failslab, interval 1, probability 0, space 0, times 0 [ 3174.981028] CPU: 1 PID: 15516 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3174.982494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3174.984231] Call Trace: 17:30:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, @perf_bp={&(0x7f0000000500)}, 0x59608, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r7, 0x112, 0x4, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000600)) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) [ 3174.984789] dump_stack+0x107/0x167 [ 3174.985668] should_fail.cold+0x5/0xa [ 3174.986481] ? create_object.isra.0+0x3a/0xa30 [ 3174.987440] should_failslab+0x5/0x20 [ 3174.988246] kmem_cache_alloc+0x5b/0x310 [ 3174.989108] create_object.isra.0+0x3a/0xa30 [ 3174.990053] kmemleak_alloc_percpu+0xa0/0x100 [ 3174.991001] pcpu_alloc+0x4e2/0x1240 [ 3174.991801] ? io_async_queue_proc+0x80/0x80 [ 3174.992730] percpu_ref_init+0x31/0x3d0 [ 3174.993581] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3174.994729] io_uring_setup+0x14f6/0x2980 [ 3174.995614] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3174.996673] ? wait_for_completion_io+0x270/0x270 [ 3174.997723] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3174.998823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3174.999908] do_syscall_64+0x33/0x40 [ 3175.000694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3175.001789] RIP: 0033:0x7f15cb12cb19 [ 3175.002571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3175.006440] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3175.008053] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3175.009563] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3175.011068] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3175.012573] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3175.014071] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3175.069928] 9pnet: Insufficient options for proto=fd 17:30:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x12, 0x0, &(0x7f0000000c80)) 17:30:15 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 39) [ 3175.117215] FAULT_INJECTION: forcing a failure. [ 3175.117215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3175.118545] CPU: 0 PID: 15525 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3175.119283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3175.120173] Call Trace: [ 3175.120462] dump_stack+0x107/0x167 [ 3175.120856] should_fail.cold+0x5/0xa [ 3175.121269] _copy_to_user+0x2e/0x180 [ 3175.121687] io_uring_setup+0x11b5/0x2980 [ 3175.122134] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3175.122680] ? wait_for_completion_io+0x270/0x270 [ 3175.123210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3175.123776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3175.124330] do_syscall_64+0x33/0x40 [ 3175.124730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3175.125282] RIP: 0033:0x7f15cb12cb19 [ 3175.125714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3175.127698] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3175.128513] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3175.129273] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3175.130043] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3175.130807] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3175.131569] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:30:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xe00) [ 3175.151157] 9pnet: Insufficient options for proto=fd 17:30:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 7) 17:30:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x600) 17:30:15 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 40) [ 3175.229885] FAULT_INJECTION: forcing a failure. [ 3175.229885] name failslab, interval 1, probability 0, space 0, times 0 [ 3175.232915] CPU: 1 PID: 15535 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3175.234688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3175.236640] Call Trace: [ 3175.237550] dump_stack+0x107/0x167 [ 3175.238422] should_fail.cold+0x5/0xa [ 3175.239450] ? create_object.isra.0+0x3a/0xa30 [ 3175.240621] should_failslab+0x5/0x20 [ 3175.241523] kmem_cache_alloc+0x5b/0x310 [ 3175.242632] create_object.isra.0+0x3a/0xa30 [ 3175.243690] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3175.245036] kmem_cache_alloc+0x159/0x310 [ 3175.246040] security_inode_alloc+0x34/0x160 [ 3175.247141] inode_init_always+0xa4e/0xd10 [ 3175.248189] ? shmem_destroy_inode+0x70/0x70 [ 3175.249205] alloc_inode+0x84/0x240 [ 3175.250178] new_inode+0x23/0x250 [ 3175.251078] shmem_get_inode+0x15e/0xbc0 [ 3175.252038] __shmem_file_setup+0xb8/0x320 [ 3175.253118] ? _copy_from_user+0xfb/0x1b0 [ 3175.254196] __do_sys_memfd_create+0x275/0x450 [ 3175.255289] ? memfd_file_seals_ptr+0x170/0x170 [ 3175.256452] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3175.257561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3175.258647] do_syscall_64+0x33/0x40 [ 3175.259440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3175.260513] RIP: 0033:0x7fcd90ea5b19 [ 3175.261299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3175.265170] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3175.266781] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3175.268277] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3175.269788] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3175.271289] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3175.272781] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 [ 3175.290915] FAULT_INJECTION: forcing a failure. [ 3175.290915] name failslab, interval 1, probability 0, space 0, times 0 [ 3175.292164] CPU: 0 PID: 15538 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3175.292910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3175.293808] Call Trace: [ 3175.294098] dump_stack+0x107/0x167 [ 3175.294491] should_fail.cold+0x5/0xa [ 3175.294902] ? __d_alloc+0x2a/0x990 [ 3175.295291] should_failslab+0x5/0x20 [ 3175.295699] kmem_cache_alloc+0x5b/0x310 [ 3175.296140] __d_alloc+0x2a/0x990 [ 3175.296516] ? find_held_lock+0x2c/0x110 [ 3175.296955] d_alloc_pseudo+0x19/0x70 [ 3175.297363] alloc_file_pseudo+0xce/0x250 [ 3175.297810] ? trace_hardirqs_on+0x5b/0x180 [ 3175.298269] ? alloc_file+0x5a0/0x5a0 [ 3175.298685] anon_inode_getfile+0xc8/0x1f0 [ 3175.299149] io_uring_setup+0x138b/0x2980 [ 3175.299593] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3175.300136] ? wait_for_completion_io+0x270/0x270 [ 3175.300661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3175.301224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3175.301780] do_syscall_64+0x33/0x40 [ 3175.302180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3175.302728] RIP: 0033:0x7f15cb12cb19 [ 3175.303126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3175.305087] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3175.305922] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3175.306680] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3175.307434] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3175.308195] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3175.308956] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:30:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000010000001800000030e7b68abd35c33760231d708ac781e032d7cd934bcb4d679ea502e8bed9d7e9e2c6c14f2a9f1a45b728e96d0553d669d27426b015152b96b12691fe4a13fde581c588f080cd9db820c2a075624c01f048f7f431a8a284152aa77c9f4805ebdc27dfb16aba9046d492bd362ac7856fa0b0eb12e58397f016b362", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000600)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:30:16 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x4018230c, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3175.315621] loop5: detected capacity change from 0 to 2048 [ 3175.318697] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:30:16 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 41) 17:30:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 8) 17:30:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xf00) [ 3175.433004] 9pnet: Insufficient options for proto=fd [ 3175.434454] FAULT_INJECTION: forcing a failure. [ 3175.434454] name failslab, interval 1, probability 0, space 0, times 0 [ 3175.434478] CPU: 0 PID: 15546 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3175.437557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3175.438447] Call Trace: [ 3175.438745] dump_stack+0x107/0x167 [ 3175.439145] should_fail.cold+0x5/0xa [ 3175.439564] ? __d_alloc+0x2a/0x990 [ 3175.439954] should_failslab+0x5/0x20 [ 3175.440364] kmem_cache_alloc+0x5b/0x310 [ 3175.440798] ? init_special_inode+0x1f0/0x1f0 [ 3175.441278] __d_alloc+0x2a/0x990 [ 3175.441657] d_alloc_pseudo+0x19/0x70 [ 3175.442065] alloc_file_pseudo+0xce/0x250 [ 3175.442505] ? alloc_file+0x5a0/0x5a0 [ 3175.442920] ? shmem_get_inode+0x55c/0xbc0 [ 3175.443376] __shmem_file_setup+0x144/0x320 [ 3175.443840] ? _copy_from_user+0xfb/0x1b0 [ 3175.444294] __do_sys_memfd_create+0x275/0x450 [ 3175.444611] FAULT_INJECTION: forcing a failure. [ 3175.444611] name failslab, interval 1, probability 0, space 0, times 0 [ 3175.444791] ? memfd_file_seals_ptr+0x170/0x170 [ 3175.447635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3175.448196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3175.448747] do_syscall_64+0x33/0x40 [ 3175.449145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3175.449696] RIP: 0033:0x7fcd90ea5b19 [ 3175.450093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3175.452045] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3175.452852] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3175.453627] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3175.454388] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3175.455148] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3175.455909] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 [ 3175.456693] CPU: 1 PID: 15549 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3175.458297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3175.460245] Call Trace: [ 3175.460806] dump_stack+0x107/0x167 [ 3175.461586] should_fail.cold+0x5/0xa [ 3175.462402] ? create_object.isra.0+0x3a/0xa30 [ 3175.463361] should_failslab+0x5/0x20 [ 3175.464165] kmem_cache_alloc+0x5b/0x310 [ 3175.465026] create_object.isra.0+0x3a/0xa30 [ 3175.465955] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3175.467029] kmem_cache_alloc+0x159/0x310 [ 3175.467908] __d_alloc+0x2a/0x990 [ 3175.468647] ? find_held_lock+0x2c/0x110 [ 3175.469516] d_alloc_pseudo+0x19/0x70 [ 3175.470324] alloc_file_pseudo+0xce/0x250 [ 3175.471193] ? trace_hardirqs_on+0x5b/0x180 [ 3175.472096] ? alloc_file+0x5a0/0x5a0 [ 3175.472911] anon_inode_getfile+0xc8/0x1f0 [ 3175.473812] io_uring_setup+0x138b/0x2980 [ 3175.474695] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3175.475770] ? wait_for_completion_io+0x270/0x270 [ 3175.476804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3175.477918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3175.479019] do_syscall_64+0x33/0x40 [ 3175.479805] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3175.480895] RIP: 0033:0x7f15cb12cb19 [ 3175.481688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3175.485563] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3175.487171] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3175.488681] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3175.490189] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3175.491705] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3175.493210] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:30:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 9) [ 3175.512021] FAULT_INJECTION: forcing a failure. [ 3175.512021] name failslab, interval 1, probability 0, space 0, times 0 [ 3175.513312] CPU: 0 PID: 15554 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3175.514057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3175.514941] Call Trace: [ 3175.515227] dump_stack+0x107/0x167 [ 3175.515616] should_fail.cold+0x5/0xa [ 3175.516024] ? create_object.isra.0+0x3a/0xa30 [ 3175.516514] should_failslab+0x5/0x20 [ 3175.516919] kmem_cache_alloc+0x5b/0x310 [ 3175.517356] create_object.isra.0+0x3a/0xa30 [ 3175.517830] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3175.518373] kmem_cache_alloc+0x159/0x310 [ 3175.518820] __d_alloc+0x2a/0x990 [ 3175.519195] d_alloc_pseudo+0x19/0x70 [ 3175.519602] alloc_file_pseudo+0xce/0x250 [ 3175.520041] ? alloc_file+0x5a0/0x5a0 [ 3175.520450] ? shmem_get_inode+0x55c/0xbc0 [ 3175.520905] __shmem_file_setup+0x144/0x320 [ 3175.521367] ? _copy_from_user+0xfb/0x1b0 [ 3175.521816] __do_sys_memfd_create+0x275/0x450 [ 3175.522352] ? memfd_file_seals_ptr+0x170/0x170 [ 3175.522917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3175.523486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3175.524040] do_syscall_64+0x33/0x40 [ 3175.524436] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3175.524989] RIP: 0033:0x7fcd90ea5b19 [ 3175.525387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3175.527341] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3175.528146] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3175.528898] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3175.529662] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3175.530419] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3175.531174] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 17:30:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x6, 0x12, 0x0, &(0x7f0000000c80)) [ 3175.542438] 9pnet: Insufficient options for proto=fd [ 3175.586545] loop5: detected capacity change from 0 to 2048 [ 3175.601170] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:30:36 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x304, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:36 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182310, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x10d6) 17:30:36 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 42) 17:30:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f0000000680)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd, 0x23, &(0x7f0000000600)=""/12, 0xc, 0x4}, 0xffffffff) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) 17:30:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x700) 17:30:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 10) 17:30:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x2, 0x0, &(0x7f0000000c80)) [ 3195.806713] FAULT_INJECTION: forcing a failure. [ 3195.806713] name failslab, interval 1, probability 0, space 0, times 0 [ 3195.809557] CPU: 1 PID: 15583 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3195.811194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3195.813250] Call Trace: [ 3195.813947] dump_stack+0x107/0x167 [ 3195.814827] should_fail.cold+0x5/0xa [ 3195.815805] ? __alloc_file+0x21/0x320 [ 3195.816694] should_failslab+0x5/0x20 [ 3195.817613] kmem_cache_alloc+0x5b/0x310 [ 3195.818489] __alloc_file+0x21/0x320 [ 3195.819329] alloc_empty_file+0x6d/0x170 [ 3195.820311] alloc_file+0x5e/0x5a0 [ 3195.821211] alloc_file_pseudo+0x16a/0x250 [ 3195.822309] ? alloc_file+0x5a0/0x5a0 [ 3195.823276] ? shmem_get_inode+0x55c/0xbc0 [ 3195.824391] __shmem_file_setup+0x144/0x320 [ 3195.825421] ? _copy_from_user+0xfb/0x1b0 [ 3195.826437] __do_sys_memfd_create+0x275/0x450 [ 3195.827686] ? memfd_file_seals_ptr+0x170/0x170 [ 3195.828755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3195.829958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3195.831348] do_syscall_64+0x33/0x40 [ 3195.832259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3195.833425] RIP: 0033:0x7fcd90ea5b19 [ 3195.834359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3195.838856] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3195.840734] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3195.842488] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3195.844303] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3195.846205] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3195.847911] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 [ 3195.854388] 9pnet: Insufficient options for proto=fd [ 3195.865834] FAULT_INJECTION: forcing a failure. [ 3195.865834] name failslab, interval 1, probability 0, space 0, times 0 [ 3195.868339] CPU: 1 PID: 15586 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3195.870026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3195.871791] Call Trace: [ 3195.872333] dump_stack+0x107/0x167 [ 3195.873112] should_fail.cold+0x5/0xa [ 3195.873934] ? create_object.isra.0+0x3a/0xa30 [ 3195.874899] should_failslab+0x5/0x20 [ 3195.875673] kmem_cache_alloc+0x5b/0x310 [ 3195.876543] create_object.isra.0+0x3a/0xa30 [ 3195.877449] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3195.878539] kmem_cache_alloc+0x159/0x310 [ 3195.879393] __d_alloc+0x2a/0x990 [ 3195.880137] ? find_held_lock+0x2c/0x110 [ 3195.881003] d_alloc_pseudo+0x19/0x70 [ 3195.881797] alloc_file_pseudo+0xce/0x250 [ 3195.882687] ? trace_hardirqs_on+0x5b/0x180 [ 3195.883600] ? alloc_file+0x5a0/0x5a0 [ 3195.884421] anon_inode_getfile+0xc8/0x1f0 [ 3195.885322] io_uring_setup+0x138b/0x2980 [ 3195.886185] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3195.887265] ? wait_for_completion_io+0x270/0x270 [ 3195.888308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3195.889419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3195.890554] do_syscall_64+0x33/0x40 [ 3195.891351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3195.892445] RIP: 0033:0x7f15cb12cb19 [ 3195.893237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3195.897172] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3195.898799] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3195.900321] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3195.901858] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3195.903373] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3195.904893] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:30:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 11) [ 3195.965820] 9pnet: Insufficient options for proto=fd [ 3195.985754] FAULT_INJECTION: forcing a failure. [ 3195.985754] name failslab, interval 1, probability 0, space 0, times 0 [ 3195.987513] CPU: 0 PID: 15593 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3195.988522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3195.989612] Call Trace: [ 3195.989984] dump_stack+0x107/0x167 [ 3195.990463] should_fail.cold+0x5/0xa [ 3195.990969] ? create_object.isra.0+0x3a/0xa30 [ 3195.991568] should_failslab+0x5/0x20 [ 3195.992069] kmem_cache_alloc+0x5b/0x310 [ 3195.992605] create_object.isra.0+0x3a/0xa30 [ 3195.993181] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3195.993860] kmem_cache_alloc+0x159/0x310 [ 3195.994409] __alloc_file+0x21/0x320 [ 3195.994896] alloc_empty_file+0x6d/0x170 [ 3195.995429] alloc_file+0x5e/0x5a0 [ 3195.995898] alloc_file_pseudo+0x16a/0x250 [ 3195.996454] ? alloc_file+0x5a0/0x5a0 [ 3195.996961] ? shmem_get_inode+0x55c/0xbc0 [ 3195.997519] __shmem_file_setup+0x144/0x320 [ 3195.998098] ? _copy_from_user+0xfb/0x1b0 [ 3195.998646] __do_sys_memfd_create+0x275/0x450 [ 3195.999245] ? memfd_file_seals_ptr+0x170/0x170 [ 3195.999859] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.000549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3196.001225] do_syscall_64+0x33/0x40 [ 3196.001725] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3196.002397] RIP: 0033:0x7fcd90ea5b19 [ 3196.002887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3196.005279] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3196.006284] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3196.007221] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3196.008150] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3196.009079] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3196.010018] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 17:30:36 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 43) 17:30:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:30:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1100) [ 3196.108711] FAULT_INJECTION: forcing a failure. [ 3196.108711] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.110223] CPU: 0 PID: 15597 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3196.111383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3196.112500] Call Trace: [ 3196.112954] dump_stack+0x107/0x167 [ 3196.113425] should_fail.cold+0x5/0xa [ 3196.114070] ? create_object.isra.0+0x3a/0xa30 [ 3196.114818] should_failslab+0x5/0x20 [ 3196.115445] kmem_cache_alloc+0x5b/0x310 [ 3196.116124] create_object.isra.0+0x3a/0xa30 [ 3196.116839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3196.117526] kmem_cache_alloc+0x159/0x310 [ 3196.118224] __alloc_file+0x21/0x320 [ 3196.118829] alloc_empty_file+0x6d/0x170 [ 3196.119374] alloc_file+0x5e/0x5a0 [ 3196.119956] alloc_file_pseudo+0x16a/0x250 [ 3196.120523] ? alloc_file+0x5a0/0x5a0 [ 3196.121154] anon_inode_getfile+0xc8/0x1f0 [ 3196.121901] io_uring_setup+0x138b/0x2980 [ 3196.122579] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3196.123253] ? wait_for_completion_io+0x270/0x270 [ 3196.124051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.124749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3196.125586] do_syscall_64+0x33/0x40 [ 3196.126100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3196.126929] RIP: 0033:0x7f15cb12cb19 [ 3196.127430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3196.130433] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3196.131402] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3196.132571] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3196.133746] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3196.134907] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3196.136057] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:30:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3, 0x0, &(0x7f0000000c80)) [ 3196.169308] loop5: detected capacity change from 0 to 2048 17:30:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x900) [ 3196.189922] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:30:36 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 44) 17:30:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 12) [ 3196.231958] FAULT_INJECTION: forcing a failure. [ 3196.231958] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.233706] CPU: 0 PID: 15611 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3196.234765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3196.236052] Call Trace: [ 3196.236475] dump_stack+0x107/0x167 [ 3196.237033] should_fail.cold+0x5/0xa [ 3196.237635] ? security_file_alloc+0x34/0x170 [ 3196.238358] should_failslab+0x5/0x20 [ 3196.238970] kmem_cache_alloc+0x5b/0x310 [ 3196.239618] security_file_alloc+0x34/0x170 [ 3196.240291] __alloc_file+0xb7/0x320 [ 3196.240736] alloc_empty_file+0x6d/0x170 [ 3196.241368] alloc_file+0x5e/0x5a0 [ 3196.241913] alloc_file_pseudo+0x16a/0x250 [ 3196.242563] ? alloc_file+0x5a0/0x5a0 [ 3196.243053] anon_inode_getfile+0xc8/0x1f0 [ 3196.243705] io_uring_setup+0x138b/0x2980 [ 3196.244349] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3196.244986] ? wait_for_completion_io+0x270/0x270 [ 3196.245751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.246556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3196.247206] do_syscall_64+0x33/0x40 [ 3196.247775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3196.248419] RIP: 0033:0x7f15cb12cb19 [ 3196.248990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3196.251805] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3196.252955] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3196.254044] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3196.255135] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3196.256217] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3196.257297] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3196.269969] 9pnet: Insufficient options for proto=fd [ 3196.286650] FAULT_INJECTION: forcing a failure. [ 3196.286650] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.288551] CPU: 0 PID: 15616 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3196.289590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3196.290698] Call Trace: [ 3196.291003] dump_stack+0x107/0x167 [ 3196.291421] should_fail.cold+0x5/0xa [ 3196.291855] ? security_file_alloc+0x34/0x170 [ 3196.292366] should_failslab+0x5/0x20 [ 3196.292801] kmem_cache_alloc+0x5b/0x310 [ 3196.293267] security_file_alloc+0x34/0x170 [ 3196.293768] __alloc_file+0xb7/0x320 [ 3196.294193] alloc_empty_file+0x6d/0x170 [ 3196.294660] alloc_file+0x5e/0x5a0 [ 3196.295067] alloc_file_pseudo+0x16a/0x250 [ 3196.295548] ? alloc_file+0x5a0/0x5a0 [ 3196.296005] ? shmem_get_inode+0x55c/0xbc0 [ 3196.296488] __shmem_file_setup+0x144/0x320 [ 3196.296976] ? _copy_from_user+0xfb/0x1b0 [ 3196.297456] __do_sys_memfd_create+0x275/0x450 [ 3196.297979] ? memfd_file_seals_ptr+0x170/0x170 [ 3196.298507] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.299098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3196.299678] do_syscall_64+0x33/0x40 [ 3196.300100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3196.300676] RIP: 0033:0x7fcd90ea5b19 [ 3196.301097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3196.303171] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3196.304027] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3196.304835] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3196.305636] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3196.306447] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3196.307249] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 [ 3196.332036] 9pnet: Insufficient options for proto=fd 17:30:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) open_tree(r10, &(0x7f00000000c0)='./file0\x00', 0x1000) mkdirat(r10, &(0x7f0000000600)='./mnt\x00', 0x56) 17:30:50 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x308, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4, 0x0, &(0x7f0000000c80)) 17:30:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xa00) 17:30:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1200) 17:30:50 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182311, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:30:50 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 45) 17:30:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 13) [ 3209.379271] FAULT_INJECTION: forcing a failure. [ 3209.379271] name failslab, interval 1, probability 0, space 0, times 0 [ 3209.381670] FAULT_INJECTION: forcing a failure. [ 3209.381670] name failslab, interval 1, probability 0, space 0, times 0 [ 3209.382772] CPU: 1 PID: 15639 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3209.386121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3209.388412] Call Trace: [ 3209.389144] dump_stack+0x107/0x167 [ 3209.390168] should_fail.cold+0x5/0xa [ 3209.391222] ? create_object.isra.0+0x3a/0xa30 [ 3209.392476] should_failslab+0x5/0x20 [ 3209.393527] kmem_cache_alloc+0x5b/0x310 [ 3209.394657] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 3209.396178] create_object.isra.0+0x3a/0xa30 [ 3209.397394] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3209.398817] kmem_cache_alloc+0x159/0x310 [ 3209.399972] security_file_alloc+0x34/0x170 [ 3209.401163] __alloc_file+0xb7/0x320 [ 3209.402203] alloc_empty_file+0x6d/0x170 [ 3209.403326] alloc_file+0x5e/0x5a0 [ 3209.404315] alloc_file_pseudo+0x16a/0x250 [ 3209.405487] ? alloc_file+0x5a0/0x5a0 [ 3209.406619] ? shmem_get_inode+0x55c/0xbc0 [ 3209.407811] __shmem_file_setup+0x144/0x320 [ 3209.409017] ? _copy_from_user+0xfb/0x1b0 [ 3209.410197] __do_sys_memfd_create+0x275/0x450 [ 3209.411351] ? memfd_file_seals_ptr+0x170/0x170 [ 3209.412491] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3209.413758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3209.414998] do_syscall_64+0x33/0x40 [ 3209.415897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3209.417126] RIP: 0033:0x7fcd90ea5b19 [ 3209.418034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3209.422351] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 3209.424137] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fcd90ea5b19 [ 3209.425822] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007fcd90eff0fb [ 3209.427509] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 3209.429181] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 3209.430865] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000300 [ 3209.432583] CPU: 0 PID: 15640 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3209.433548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3209.434671] Call Trace: [ 3209.435042] dump_stack+0x107/0x167 [ 3209.435535] should_fail.cold+0x5/0xa [ 3209.436049] ? create_object.isra.0+0x3a/0xa30 [ 3209.436662] should_failslab+0x5/0x20 [ 3209.437185] kmem_cache_alloc+0x5b/0x310 [ 3209.437200] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 3209.437215] create_object.isra.0+0x3a/0xa30 [ 3209.437227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3209.437243] kmem_cache_alloc+0x159/0x310 [ 3209.437261] security_file_alloc+0x34/0x170 [ 3209.437274] __alloc_file+0xb7/0x320 [ 3209.437287] alloc_empty_file+0x6d/0x170 [ 3209.437300] alloc_file+0x5e/0x5a0 [ 3209.437314] alloc_file_pseudo+0x16a/0x250 [ 3209.437325] ? alloc_file+0x5a0/0x5a0 [ 3209.437348] anon_inode_getfile+0xc8/0x1f0 [ 3209.437365] io_uring_setup+0x138b/0x2980 [ 3209.437383] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3209.437395] ? wait_for_completion_io+0x270/0x270 [ 3209.437424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3209.437437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3209.437452] do_syscall_64+0x33/0x40 [ 3209.437466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3209.437476] RIP: 0033:0x7f15cb12cb19 [ 3209.437490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3209.437497] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3209.437511] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3209.437519] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3209.437527] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3209.437534] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3209.437542] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3209.496289] 9pnet: Insufficient options for proto=fd [ 3209.569338] 9pnet: Insufficient options for proto=fd 17:30:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xb00) 17:30:50 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 46) 17:30:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x5, 0x0, &(0x7f0000000c80)) [ 3209.650764] loop5: detected capacity change from 0 to 2048 [ 3209.657281] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3209.671256] FAULT_INJECTION: forcing a failure. [ 3209.671256] name failslab, interval 1, probability 0, space 0, times 0 [ 3209.672628] CPU: 0 PID: 15655 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3209.673465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3209.674467] Call Trace: [ 3209.674791] dump_stack+0x107/0x167 [ 3209.675233] should_fail.cold+0x5/0xa [ 3209.675698] ? io_uring_alloc_task_context+0x99/0x6a0 [ 3209.676316] should_failslab+0x5/0x20 [ 3209.676774] kmem_cache_alloc_trace+0x55/0x320 [ 3209.677326] io_uring_alloc_task_context+0x99/0x6a0 [ 3209.677932] ? io_import_iovec+0x1120/0x1120 [ 3209.678461] ? lock_downgrade+0x6d0/0x6d0 [ 3209.678956] ? do_raw_spin_lock+0x121/0x260 [ 3209.679473] ? rwlock_bug.part.0+0x90/0x90 [ 3209.679983] __io_uring_add_tctx_node+0x2c6/0x520 [ 3209.680563] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3209.681188] ? alloc_fd+0x2e7/0x670 [ 3209.681630] io_uring_setup+0x1fbb/0x2980 [ 3209.682138] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3209.682743] ? wait_for_completion_io+0x270/0x270 [ 3209.683333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3209.683962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3209.684582] do_syscall_64+0x33/0x40 [ 3209.685029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3209.685641] RIP: 0033:0x7f15cb12cb19 [ 3209.686099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3209.688289] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3209.689191] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3209.690045] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3209.690890] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3209.691737] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3209.692584] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:31:04 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182312, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:31:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r10, 0x112, 0x4, 0x0, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r10, 0x100, 0x0, 0x2, 0x5, 0x1}, 0xffffffff) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:31:04 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x328, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:31:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x6, 0x0, &(0x7f0000000c80)) 17:31:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 14) 17:31:04 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 47) 17:31:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1300) 17:31:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xc00) [ 3223.592493] FAULT_INJECTION: forcing a failure. [ 3223.592493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3223.596187] CPU: 0 PID: 15675 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3223.596216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3223.596224] Call Trace: [ 3223.596252] dump_stack+0x107/0x167 [ 3223.596278] should_fail.cold+0x5/0xa [ 3223.596307] __alloc_pages_nodemask+0x182/0x600 [ 3223.596335] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3223.596356] ? lock_downgrade+0x6d0/0x6d0 [ 3223.596377] ? lock_acquire+0x197/0x470 [ 3223.596419] alloc_pages_vma+0xbb/0x410 [ 3223.596449] shmem_alloc_page+0x10f/0x1e0 [ 3223.596472] ? shmem_init_inode+0x20/0x20 [ 3223.596522] ? percpu_counter_add_batch+0x8b/0x140 [ 3223.596550] ? __vm_enough_memory+0x184/0x360 [ 3223.596580] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 3223.596624] ? shmem_unuse_inode+0xf60/0xf60 [ 3223.596643] ? timestamp_truncate+0x1e6/0x2f0 [ 3223.596667] ? iov_iter_fault_in_readable+0x9a/0x410 [ 3223.596699] shmem_write_begin+0xf7/0x1d0 [ 3223.596727] generic_perform_write+0x20a/0x4f0 [ 3223.596763] ? page_cache_prev_miss+0x310/0x310 [ 3223.596784] ? evict_inodes+0x470/0x470 [ 3223.596807] ? generic_write_checks+0x2ad/0x390 [ 3223.596838] __generic_file_write_iter+0x39d/0x5d0 [ 3223.596868] generic_file_write_iter+0xdb/0x230 [ 3223.596886] ? iov_iter_init+0x3c/0x130 [ 3223.596914] new_sync_write+0x42c/0x660 [ 3223.596939] ? new_sync_read+0x6f0/0x6f0 [ 3223.596960] ? __x64_sys_pwrite64+0x201/0x260 [ 3223.596987] ? lock_release+0x680/0x680 [ 3223.597011] ? selinux_file_permission+0x92/0x520 [ 3223.597047] ? security_file_permission+0xb1/0xe0 [ 3223.597077] vfs_write+0x7c0/0xb10 [ 3223.597104] __x64_sys_pwrite64+0x201/0x260 [ 3223.597124] ? ksys_pwrite64+0x1b0/0x1b0 [ 3223.597152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3223.597178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3223.597205] do_syscall_64+0x33/0x40 [ 3223.597228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3223.597243] RIP: 0033:0x7fcd90e58ab7 [ 3223.597264] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 3223.597276] RSP: 002b:00007fcd8e41af20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 3223.597299] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90e58ab7 [ 3223.597312] RDX: 0000000000000061 RSI: 0000000020010000 RDI: 0000000000000004 [ 3223.597325] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 3223.597338] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 3223.597350] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 3223.602918] FAULT_INJECTION: forcing a failure. [ 3223.602918] name failslab, interval 1, probability 0, space 0, times 0 [ 3223.602934] CPU: 1 PID: 15679 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3223.602940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3223.602944] Call Trace: [ 3223.602962] dump_stack+0x107/0x167 [ 3223.602975] should_fail.cold+0x5/0xa [ 3223.602989] ? create_object.isra.0+0x3a/0xa30 [ 3223.603000] should_failslab+0x5/0x20 [ 3223.603015] kmem_cache_alloc+0x5b/0x310 [ 3223.603028] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 3223.603045] create_object.isra.0+0x3a/0xa30 [ 3223.603054] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3223.603066] kmem_cache_alloc+0x159/0x310 [ 3223.603085] security_file_alloc+0x34/0x170 [ 3223.603096] __alloc_file+0xb7/0x320 [ 3223.603107] alloc_empty_file+0x6d/0x170 [ 3223.603117] alloc_file+0x5e/0x5a0 [ 3223.603128] alloc_file_pseudo+0x16a/0x250 [ 3223.603137] ? alloc_file+0x5a0/0x5a0 [ 3223.603155] anon_inode_getfile+0xc8/0x1f0 [ 3223.603170] io_uring_setup+0x138b/0x2980 [ 3223.603184] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3223.603195] ? wait_for_completion_io+0x270/0x270 [ 3223.603218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3223.603230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3223.603242] do_syscall_64+0x33/0x40 [ 3223.603252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3223.603260] RIP: 0033:0x7f15cb12cb19 [ 3223.603270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3223.603276] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3223.603289] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3223.603297] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3223.603305] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3223.603312] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3223.603318] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3223.636261] loop5: detected capacity change from 0 to 2048 [ 3223.642399] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 3223.697855] 9pnet: Insufficient options for proto=fd [ 3223.736978] 9pnet: Insufficient options for proto=fd 17:31:18 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 48) [ 3238.136794] FAULT_INJECTION: forcing a failure. [ 3238.136794] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.138329] CPU: 1 PID: 15702 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3238.139240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3238.140301] Call Trace: [ 3238.140643] dump_stack+0x107/0x167 [ 3238.141128] should_fail.cold+0x5/0xa [ 3238.141622] ? create_object.isra.0+0x3a/0xa30 [ 3238.142228] should_failslab+0x5/0x20 [ 3238.142718] kmem_cache_alloc+0x5b/0x310 [ 3238.143243] create_object.isra.0+0x3a/0xa30 [ 3238.143807] kmemleak_alloc_percpu+0xa0/0x100 [ 3238.144380] pcpu_alloc+0x4e2/0x1240 [ 3238.144872] __percpu_counter_init+0x10d/0x2d0 [ 3238.145468] io_uring_alloc_task_context+0xcc/0x6a0 [ 3238.146131] ? io_import_iovec+0x1120/0x1120 [ 3238.146693] ? lock_downgrade+0x6d0/0x6d0 [ 3238.147240] ? do_raw_spin_lock+0x121/0x260 17:31:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x8, 0x0, &(0x7f0000000c80)) 17:31:18 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182314, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3238.147784] ? rwlock_bug.part.0+0x90/0x90 [ 3238.148494] __io_uring_add_tctx_node+0x2c6/0x520 [ 3238.149148] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3238.149815] ? alloc_fd+0x2e7/0x670 [ 3238.150297] io_uring_setup+0x1fbb/0x2980 [ 3238.150845] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3238.151498] ? wait_for_completion_io+0x270/0x270 [ 3238.152126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3238.152785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3238.153433] do_syscall_64+0x33/0x40 [ 3238.153902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3238.154554] RIP: 0033:0x7f15cb12cb19 [ 3238.155018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3238.157319] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3238.158299] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3238.159192] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3238.160085] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3238.160976] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3238.161882] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3238.180951] FAULT_INJECTION: forcing a failure. [ 3238.180951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3238.182536] CPU: 1 PID: 15710 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3238.183407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3238.184443] Call Trace: [ 3238.184775] dump_stack+0x107/0x167 [ 3238.185235] should_fail.cold+0x5/0xa [ 3238.185722] ? timestamp_truncate+0x1e6/0x2f0 [ 3238.186296] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 3238.186965] ? shmem_write_begin+0xf7/0x1d0 [ 3238.187510] ? shmem_write_begin+0x100/0x1d0 [ 3238.188254] generic_perform_write+0x279/0x4f0 [ 3238.188909] ? page_cache_prev_miss+0x310/0x310 [ 3238.189498] ? evict_inodes+0x470/0x470 [ 3238.190011] ? generic_write_checks+0x2ad/0x390 [ 3238.190608] __generic_file_write_iter+0x39d/0x5d0 [ 3238.191226] generic_file_write_iter+0xdb/0x230 [ 3238.191809] ? iov_iter_init+0x3c/0x130 17:31:18 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x33c, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:31:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000480)=ANY=[@ANYBLOB="7902be0edcb165dd04e0180000", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637279707465645f64697200"]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000001000000180000008b5599df09bc61f04d93b3a6a08b3da470c31dce", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:31:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1400) 17:31:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xd00) 17:31:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 15) [ 3238.192314] new_sync_write+0x42c/0x660 [ 3238.192930] ? new_sync_read+0x6f0/0x6f0 [ 3238.193435] ? __x64_sys_pwrite64+0x201/0x260 [ 3238.193997] ? lock_release+0x680/0x680 [ 3238.194513] ? selinux_file_permission+0x92/0x520 [ 3238.195122] ? security_file_permission+0xb1/0xe0 [ 3238.195726] vfs_write+0x7c0/0xb10 [ 3238.196172] __x64_sys_pwrite64+0x201/0x260 [ 3238.196712] ? ksys_pwrite64+0x1b0/0x1b0 [ 3238.197226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3238.197891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3238.198541] do_syscall_64+0x33/0x40 [ 3238.199003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3238.199652] RIP: 0033:0x7fcd90e58ab7 [ 3238.200113] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 3238.202410] RSP: 002b:00007fcd8e41af20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 3238.203359] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90e58ab7 [ 3238.203366] RDX: 0000000000000061 RSI: 0000000020010000 RDI: 0000000000000004 [ 3238.203373] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 3238.203379] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 3238.203386] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 3238.209844] 9pnet: Insufficient options for proto=fd [ 3238.218639] 9pnet: Insufficient options for proto=fd [ 3238.247389] loop5: detected capacity change from 0 to 2048 [ 3238.254746] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:31:19 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 49) 17:31:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 16) [ 3238.321713] FAULT_INJECTION: forcing a failure. [ 3238.321713] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.323564] CPU: 1 PID: 15724 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3238.324389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3238.325547] Call Trace: [ 3238.325873] dump_stack+0x107/0x167 [ 3238.326318] should_fail.cold+0x5/0xa [ 3238.326773] ? create_object.isra.0+0x3a/0xa30 [ 3238.327312] should_failslab+0x5/0x20 [ 3238.327759] kmem_cache_alloc+0x5b/0x310 [ 3238.328237] create_object.isra.0+0x3a/0xa30 [ 3238.328758] kmemleak_alloc_percpu+0xa0/0x100 [ 3238.329298] pcpu_alloc+0x4e2/0x1240 [ 3238.329750] __percpu_counter_init+0x10d/0x2d0 [ 3238.330304] io_uring_alloc_task_context+0xcc/0x6a0 [ 3238.330893] ? io_import_iovec+0x1120/0x1120 [ 3238.331409] ? lock_downgrade+0x6d0/0x6d0 [ 3238.331903] ? do_raw_spin_lock+0x121/0x260 [ 3238.332410] ? rwlock_bug.part.0+0x90/0x90 [ 3238.332914] __io_uring_add_tctx_node+0x2c6/0x520 [ 3238.333478] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3238.334094] ? alloc_fd+0x2e7/0x670 [ 3238.334539] io_uring_setup+0x1fbb/0x2980 [ 3238.335032] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3238.335627] ? wait_for_completion_io+0x270/0x270 [ 3238.336205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3238.336821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3238.337433] do_syscall_64+0x33/0x40 [ 3238.337877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3238.338490] RIP: 0033:0x7f15cb12cb19 [ 3238.338935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3238.341099] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3238.341996] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3238.342842] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3238.343675] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3238.344506] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3238.345337] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:31:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_config_ext={0x7, 0x401}, 0x50008, 0x0, 0x1fe, 0x7, 0x4, 0xfffffffb, 0xb8, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) 17:31:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0xb, 0x0, &(0x7f0000000c80)) [ 3238.355161] 9pnet: Insufficient options for proto=fd [ 3238.366008] 9pnet: Insufficient options for proto=fd 17:31:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(r0, &(0x7f0000000600)='./mnt\x00', 0x80) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 3238.399548] FAULT_INJECTION: forcing a failure. [ 3238.399548] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.400879] CPU: 1 PID: 15731 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3238.401667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3238.402629] Call Trace: [ 3238.402945] dump_stack+0x107/0x167 [ 3238.403369] should_fail.cold+0x5/0xa [ 3238.403806] ? getname_flags.part.0+0x50/0x4f0 [ 3238.404330] should_failslab+0x5/0x20 [ 3238.404769] kmem_cache_alloc+0x5b/0x310 [ 3238.405243] ? new_sync_write+0x499/0x660 [ 3238.405717] getname_flags.part.0+0x50/0x4f0 [ 3238.406232] getname+0x8e/0xd0 [ 3238.406604] do_sys_openat2+0xf9/0x4d0 [ 3238.407052] ? build_open_flags+0x6f0/0x6f0 [ 3238.407549] ? rcu_read_lock_any_held+0x75/0xa0 [ 3238.408085] __x64_sys_openat+0x13f/0x1f0 [ 3238.408557] ? __ia32_sys_open+0x1c0/0x1c0 [ 3238.409048] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3238.409647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3238.410251] do_syscall_64+0x33/0x40 [ 3238.410675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3238.411264] RIP: 0033:0x7fcd90e58a04 [ 3238.411690] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3238.413782] RSP: 002b:00007fcd8e41aed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3238.414665] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90e58a04 [ 3238.415481] RDX: 0000000000000002 RSI: 00007fcd8e41b000 RDI: 00000000ffffff9c [ 3238.416297] RBP: 00007fcd8e41b000 R08: 0000000000000000 R09: ffffffffffffffff [ 3238.417113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3238.417927] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:31:19 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 50) 17:31:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 17) 17:31:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1500) 17:31:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x10, 0x0, &(0x7f0000000c80)) [ 3238.573691] FAULT_INJECTION: forcing a failure. [ 3238.573691] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.575084] CPU: 1 PID: 15741 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3238.575882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3238.576837] Call Trace: [ 3238.577147] dump_stack+0x107/0x167 [ 3238.577565] should_fail.cold+0x5/0xa [ 3238.578001] ? create_object.isra.0+0x3a/0xa30 [ 3238.578530] should_failslab+0x5/0x20 [ 3238.578965] kmem_cache_alloc+0x5b/0x310 [ 3238.579424] ? __generic_file_write_iter+0x1a4/0x5d0 [ 3238.580004] create_object.isra.0+0x3a/0xa30 [ 3238.580502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3238.581082] kmem_cache_alloc+0x159/0x310 [ 3238.581557] ? new_sync_write+0x499/0x660 [ 3238.582037] getname_flags.part.0+0x50/0x4f0 [ 3238.582551] getname+0x8e/0xd0 [ 3238.582917] do_sys_openat2+0xf9/0x4d0 [ 3238.583366] ? build_open_flags+0x6f0/0x6f0 [ 3238.583861] ? rcu_read_lock_any_held+0x75/0xa0 [ 3238.584392] __x64_sys_openat+0x13f/0x1f0 [ 3238.584865] ? __ia32_sys_open+0x1c0/0x1c0 [ 3238.585354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3238.585961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3238.586560] do_syscall_64+0x33/0x40 [ 3238.586981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3238.587562] RIP: 0033:0x7fcd90e58a04 [ 3238.587991] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3238.590081] RSP: 002b:00007fcd8e41aed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3238.590955] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90e58a04 [ 3238.591757] RDX: 0000000000000002 RSI: 00007fcd8e41b000 RDI: 00000000ffffff9c [ 3238.592572] RBP: 00007fcd8e41b000 R08: 0000000000000000 R09: ffffffffffffffff [ 3238.593384] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3238.594198] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3238.599194] FAULT_INJECTION: forcing a failure. [ 3238.599194] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.602102] CPU: 0 PID: 15742 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3238.603854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3238.605789] Call Trace: [ 3238.606424] dump_stack+0x107/0x167 [ 3238.607287] should_fail.cold+0x5/0xa [ 3238.608202] ? io_wq_create+0xeb/0xc00 [ 3238.609124] should_failslab+0x5/0x20 [ 3238.610009] __kmalloc+0x72/0x390 [ 3238.610859] io_wq_create+0xeb/0xc00 [ 3238.611756] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3238.612957] ? io_import_iovec+0x1120/0x1120 [ 3238.613996] ? io_apoll_task_func+0x2d0/0x2d0 [ 3238.615059] ? __io_req_find_next+0x300/0x300 [ 3238.616118] ? do_raw_spin_lock+0x121/0x260 [ 3238.617136] ? rwlock_bug.part.0+0x90/0x90 [ 3238.618152] __io_uring_add_tctx_node+0x2c6/0x520 [ 3238.619293] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3238.620521] ? alloc_fd+0x2e7/0x670 [ 3238.621402] io_uring_setup+0x1fbb/0x2980 [ 3238.622394] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3238.623575] ? wait_for_completion_io+0x270/0x270 [ 3238.624732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3238.625968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3238.627203] do_syscall_64+0x33/0x40 [ 3238.628099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3238.629308] RIP: 0033:0x7f15cb12cb19 17:31:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xe00) [ 3238.630198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3238.634687] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3238.636476] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3238.638153] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3238.639835] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3238.641533] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3238.643243] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3238.660951] 9pnet: Insufficient options for proto=fd [ 3238.662193] loop5: detected capacity change from 0 to 2048 [ 3238.675693] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3238.697476] 9pnet: Insufficient options for proto=fd [ 3252.523629] FAULT_INJECTION: forcing a failure. [ 3252.523629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3252.526190] CPU: 1 PID: 15768 Comm: syz-executor.5 Not tainted 5.10.260 #1 17:31:33 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 51) 17:31:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1600) 17:31:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x11, 0x0, &(0x7f0000000c80)) 17:31:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000010082a318000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) rename(&(0x7f0000000600)='mnt/encrypted_dir\x00', &(0x7f0000000680)='mnt/encrypted_dir\x00') 17:31:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xf00) 17:31:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 18) 17:31:33 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182315, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3252.527670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3252.529554] Call Trace: [ 3252.530117] dump_stack+0x107/0x167 [ 3252.530904] should_fail.cold+0x5/0xa [ 3252.531713] strncpy_from_user+0x34/0x470 [ 3252.532603] getname_flags.part.0+0x95/0x4f0 [ 3252.533537] getname+0x8e/0xd0 [ 3252.534218] do_sys_openat2+0xf9/0x4d0 [ 3252.535057] ? build_open_flags+0x6f0/0x6f0 17:31:33 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x348, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3252.535980] ? rcu_read_lock_any_held+0x75/0xa0 [ 3252.537117] __x64_sys_openat+0x13f/0x1f0 [ 3252.537995] ? __ia32_sys_open+0x1c0/0x1c0 [ 3252.538906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3252.540005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3252.541098] do_syscall_64+0x33/0x40 [ 3252.541886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3252.543168] RIP: 0033:0x7fcd90e58a04 [ 3252.543950] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3252.548250] RSP: 002b:00007fcd8e41aed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3252.549982] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90e58a04 [ 3252.551612] RDX: 0000000000000002 RSI: 00007fcd8e41b000 RDI: 00000000ffffff9c [ 3252.553384] RBP: 00007fcd8e41b000 R08: 0000000000000000 R09: ffffffffffffffff [ 3252.555007] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3252.556655] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3252.585013] FAULT_INJECTION: forcing a failure. [ 3252.585013] name failslab, interval 1, probability 0, space 0, times 0 [ 3252.587704] CPU: 1 PID: 15770 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3252.589252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3252.591206] Call Trace: [ 3252.591792] dump_stack+0x107/0x167 [ 3252.592666] should_fail.cold+0x5/0xa [ 3252.593563] ? create_object.isra.0+0x3a/0xa30 [ 3252.594657] should_failslab+0x5/0x20 [ 3252.595585] kmem_cache_alloc+0x5b/0x310 [ 3252.596562] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 3252.597659] create_object.isra.0+0x3a/0xa30 [ 3252.598596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3252.599773] __kmalloc+0x16e/0x390 [ 3252.600636] io_wq_create+0xeb/0xc00 [ 3252.601523] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3252.602660] ? io_import_iovec+0x1120/0x1120 [ 3252.603646] ? io_apoll_task_func+0x2d0/0x2d0 [ 3252.604586] ? __io_req_find_next+0x300/0x300 [ 3252.605523] ? do_raw_spin_lock+0x121/0x260 [ 3252.606441] ? rwlock_bug.part.0+0x90/0x90 [ 3252.607471] __io_uring_add_tctx_node+0x2c6/0x520 [ 3252.608681] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3252.609834] ? alloc_fd+0x2e7/0x670 [ 3252.610694] io_uring_setup+0x1fbb/0x2980 [ 3252.610899] 9pnet: Insufficient options for proto=fd [ 3252.611573] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3252.611614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3252.611634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3252.611657] do_syscall_64+0x33/0x40 [ 3252.617099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3252.618305] RIP: 0033:0x7f15cb12cb19 [ 3252.619093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3252.623452] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3252.625103] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3252.626938] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3252.628586] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3252.630095] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3252.631745] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3252.668675] 9pnet: Insufficient options for proto=fd 17:31:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x40, 0x3d9}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) openat(r5, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x600500, 0x101) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:31:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 19) [ 3252.833420] 9pnet: Insufficient options for proto=fd 17:31:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1100) 17:31:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x13, 0x0, &(0x7f0000000c80)) [ 3252.866459] FAULT_INJECTION: forcing a failure. [ 3252.866459] name failslab, interval 1, probability 0, space 0, times 0 [ 3252.869288] CPU: 0 PID: 15790 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3252.870974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 17:31:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1700) [ 3252.872967] Call Trace: [ 3252.873775] dump_stack+0x107/0x167 [ 3252.874669] should_fail.cold+0x5/0xa [ 3252.875585] ? __alloc_file+0x21/0x320 [ 3252.876526] should_failslab+0x5/0x20 [ 3252.877445] kmem_cache_alloc+0x5b/0x310 [ 3252.878444] __alloc_file+0x21/0x320 [ 3252.879343] alloc_empty_file+0x6d/0x170 [ 3252.880319] path_openat+0xe6/0x2770 [ 3252.880595] 9pnet: Insufficient options for proto=fd [ 3252.881219] ? __lock_acquire+0x1657/0x5b00 [ 3252.881257] ? path_lookupat+0x860/0x860 [ 3252.884286] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3252.885552] ? lock_acquire+0x197/0x470 [ 3252.886521] ? find_held_lock+0x2c/0x110 [ 3252.887510] do_filp_open+0x190/0x3e0 [ 3252.888427] ? may_open_dev+0xf0/0xf0 [ 3252.889348] ? alloc_fd+0x2e7/0x670 [ 3252.890226] ? lock_downgrade+0x6d0/0x6d0 [ 3252.891236] ? do_raw_spin_lock+0x121/0x260 [ 3252.892278] ? rwlock_bug.part.0+0x90/0x90 [ 3252.893317] ? _raw_spin_unlock+0x1a/0x30 [ 3252.894315] ? alloc_fd+0x2e7/0x670 [ 3252.895204] do_sys_openat2+0x171/0x4d0 [ 3252.896158] ? build_open_flags+0x6f0/0x6f0 [ 3252.897200] ? rcu_read_lock_any_held+0x75/0xa0 [ 3252.898324] __x64_sys_openat+0x13f/0x1f0 [ 3252.899312] ? __ia32_sys_open+0x1c0/0x1c0 [ 3252.900332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3252.901581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3252.902825] do_syscall_64+0x33/0x40 [ 3252.903719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3252.904945] RIP: 0033:0x7fcd90e58a04 [ 3252.905834] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 17:31:33 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt/file0\x00'}) getdents(r1, &(0x7f0000001100)=""/4096, 0x1000) r2 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xfffffffe}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, 'mnt/encrypted_dir\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r9 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) [ 3252.910239] RSP: 002b:00007fcd8e41aed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3252.912153] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90e58a04 [ 3252.913860] RDX: 0000000000000002 RSI: 00007fcd8e41b000 RDI: 00000000ffffff9c [ 3252.915575] RBP: 00007fcd8e41b000 R08: 0000000000000000 R09: ffffffffffffffff [ 3252.917285] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3252.918988] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:31:33 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 52) [ 3253.013665] FAULT_INJECTION: forcing a failure. [ 3253.013665] name failslab, interval 1, probability 0, space 0, times 0 [ 3253.016198] CPU: 0 PID: 15801 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3253.017617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3253.019300] Call Trace: [ 3253.019831] dump_stack+0x107/0x167 [ 3253.020571] should_fail.cold+0x5/0xa [ 3253.021342] ? io_wq_create+0x6ef/0xc00 [ 3253.022138] should_failslab+0x5/0x20 [ 3253.022911] kmem_cache_alloc_node_trace+0x59/0x340 [ 3253.023918] io_wq_create+0x6ef/0xc00 [ 3253.024688] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3253.025716] ? io_import_iovec+0x1120/0x1120 [ 3253.026610] ? io_apoll_task_func+0x2d0/0x2d0 [ 3253.027537] ? __io_req_find_next+0x300/0x300 [ 3253.028439] ? do_raw_spin_lock+0x121/0x260 [ 3253.029307] ? rwlock_bug.part.0+0x90/0x90 [ 3253.030155] __io_uring_add_tctx_node+0x2c6/0x520 [ 3253.031133] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3253.032249] ? alloc_fd+0x2e7/0x670 [ 3253.032998] io_uring_setup+0x1fbb/0x2980 [ 3253.033840] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3253.034861] ? wait_for_completion_io+0x270/0x270 [ 3253.035847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3253.036901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3253.037944] do_syscall_64+0x33/0x40 [ 3253.038699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3253.039723] RIP: 0033:0x7f15cb12cb19 [ 3253.040473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3253.044188] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3253.045702] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3253.047128] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3253.048543] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3253.049950] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3253.051375] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3253.080408] 9pnet: Insufficient options for proto=fd 17:31:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 20) [ 3253.139743] 9pnet: Insufficient options for proto=fd 17:31:33 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182318, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3253.231371] FAULT_INJECTION: forcing a failure. [ 3253.231371] name failslab, interval 1, probability 0, space 0, times 0 [ 3253.233673] CPU: 0 PID: 15813 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3253.234973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3253.236527] Call Trace: [ 3253.237020] dump_stack+0x107/0x167 [ 3253.237681] should_fail.cold+0x5/0xa [ 3253.238383] ? create_object.isra.0+0x3a/0xa30 [ 3253.239217] should_failslab+0x5/0x20 [ 3253.239908] kmem_cache_alloc+0x5b/0x310 [ 3253.240661] create_object.isra.0+0x3a/0xa30 [ 3253.241460] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3253.242391] kmem_cache_alloc+0x159/0x310 [ 3253.243133] __alloc_file+0x21/0x320 [ 3253.243807] alloc_empty_file+0x6d/0x170 [ 3253.244539] path_openat+0xe6/0x2770 [ 3253.245214] ? __lock_acquire+0x1657/0x5b00 [ 3253.246000] ? path_lookupat+0x860/0x860 [ 3253.246740] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3253.247676] ? lock_acquire+0x197/0x470 [ 3253.248387] ? find_held_lock+0x2c/0x110 [ 3253.249129] do_filp_open+0x190/0x3e0 [ 3253.249809] ? may_open_dev+0xf0/0xf0 [ 3253.250503] ? alloc_fd+0x2e7/0x670 [ 3253.251155] ? lock_downgrade+0x6d0/0x6d0 [ 3253.251896] ? do_raw_spin_lock+0x121/0x260 [ 3253.252666] ? rwlock_bug.part.0+0x90/0x90 [ 3253.253430] ? _raw_spin_unlock+0x1a/0x30 [ 3253.254171] ? alloc_fd+0x2e7/0x670 [ 3253.254845] do_sys_openat2+0x171/0x4d0 [ 3253.255560] ? build_open_flags+0x6f0/0x6f0 [ 3253.256341] ? rcu_read_lock_any_held+0x75/0xa0 [ 3253.257180] __x64_sys_openat+0x13f/0x1f0 [ 3253.257922] ? __ia32_sys_open+0x1c0/0x1c0 [ 3253.258682] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3253.259616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3253.260534] do_syscall_64+0x33/0x40 [ 3253.261182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3253.262114] RIP: 0033:0x7fcd90e58a04 [ 3253.262765] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3253.266044] RSP: 002b:00007fcd8e41aed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3253.267424] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90e58a04 [ 3253.268674] RDX: 0000000000000002 RSI: 00007fcd8e41b000 RDI: 00000000ffffff9c [ 3253.269965] RBP: 00007fcd8e41b000 R08: 0000000000000000 R09: ffffffffffffffff [ 3253.271267] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3253.272552] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3253.359002] loop5: detected capacity change from 0 to 2048 [ 3253.366135] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:31:47 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182324, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:31:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x17, 0x0, &(0x7f0000000c80)) 17:31:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 21) 17:31:47 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 53) 17:31:47 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x35a, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:31:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x1000) inotify_add_watch(r0, &(0x7f0000000600)='./mnt\x00', 0x800) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x1}}, 'mnt/encrypted_dir\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) 17:31:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1800) 17:31:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1200) [ 3266.839997] FAULT_INJECTION: forcing a failure. [ 3266.839997] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.842496] CPU: 1 PID: 15833 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3266.844065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3266.846009] Call Trace: [ 3266.846605] dump_stack+0x107/0x167 [ 3266.847410] should_fail.cold+0x5/0xa [ 3266.848250] ? security_file_alloc+0x34/0x170 [ 3266.849249] should_failslab+0x5/0x20 [ 3266.850086] kmem_cache_alloc+0x5b/0x310 [ 3266.850991] security_file_alloc+0x34/0x170 [ 3266.851949] __alloc_file+0xb7/0x320 [ 3266.852767] alloc_empty_file+0x6d/0x170 [ 3266.853670] path_openat+0xe6/0x2770 [ 3266.854498] ? __lock_acquire+0x1657/0x5b00 [ 3266.855444] ? path_lookupat+0x860/0x860 [ 3266.856339] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3266.857497] ? lock_acquire+0x197/0x470 [ 3266.858359] ? find_held_lock+0x2c/0x110 [ 3266.859283] do_filp_open+0x190/0x3e0 [ 3266.860129] ? may_open_dev+0xf0/0xf0 [ 3266.860982] ? alloc_fd+0x2e7/0x670 [ 3266.861795] ? lock_downgrade+0x6d0/0x6d0 [ 3266.862733] ? do_raw_spin_lock+0x121/0x260 [ 3266.863692] ? rwlock_bug.part.0+0x90/0x90 [ 3266.864646] ? _raw_spin_unlock+0x1a/0x30 [ 3266.865560] ? alloc_fd+0x2e7/0x670 [ 3266.866359] do_sys_openat2+0x171/0x4d0 [ 3266.867231] ? build_open_flags+0x6f0/0x6f0 [ 3266.867460] 9pnet: Insufficient options for proto=fd [ 3266.868159] ? rcu_read_lock_any_held+0x75/0xa0 [ 3266.868183] __x64_sys_openat+0x13f/0x1f0 [ 3266.868202] ? __ia32_sys_open+0x1c0/0x1c0 [ 3266.868229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3266.868249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3266.868271] do_syscall_64+0x33/0x40 [ 3266.868290] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3266.868303] RIP: 0033:0x7fcd90e58a04 [ 3266.868327] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3266.872754] FAULT_INJECTION: forcing a failure. [ 3266.872754] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.882755] RSP: 002b:00007fcd8e41aed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3266.882776] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90e58a04 [ 3266.882787] RDX: 0000000000000002 RSI: 00007fcd8e41b000 RDI: 00000000ffffff9c [ 3266.882797] RBP: 00007fcd8e41b000 R08: 0000000000000000 R09: ffffffffffffffff [ 3266.882807] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3266.882818] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3266.882852] CPU: 0 PID: 15836 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3266.882859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3266.882864] Call Trace: [ 3266.882883] dump_stack+0x107/0x167 [ 3266.882897] should_fail.cold+0x5/0xa [ 3266.882911] ? create_object.isra.0+0x3a/0xa30 [ 3266.882922] should_failslab+0x5/0x20 [ 3266.882934] kmem_cache_alloc+0x5b/0x310 [ 3266.882947] ? io_wq_create+0x114/0xc00 [ 3266.882960] create_object.isra.0+0x3a/0xa30 [ 3266.882970] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3266.882985] kmem_cache_alloc_node_trace+0x16d/0x340 [ 3266.883000] io_wq_create+0x6ef/0xc00 [ 3266.883016] io_uring_alloc_task_context+0x1f1/0x6a0 17:31:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x18, 0x0, &(0x7f0000000c80)) [ 3266.883032] ? io_import_iovec+0x1120/0x1120 [ 3266.883043] ? io_apoll_task_func+0x2d0/0x2d0 [ 3266.883053] ? __io_req_find_next+0x300/0x300 [ 3266.883063] ? do_raw_spin_lock+0x121/0x260 17:31:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 22) [ 3266.883073] ? rwlock_bug.part.0+0x90/0x90 [ 3266.883087] __io_uring_add_tctx_node+0x2c6/0x520 [ 3266.883098] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3266.883109] ? alloc_fd+0x2e7/0x670 [ 3266.883125] io_uring_setup+0x1fbb/0x2980 [ 3266.883140] ? __do_sys_io_uring_enter+0x1890/0x1890 17:31:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000600)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 3266.883150] ? wait_for_completion_io+0x270/0x270 [ 3266.883173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3266.883185] ? syscall_enter_from_user_mode+0x1d/0x50 17:31:47 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 54) [ 3266.883198] do_syscall_64+0x33/0x40 [ 3266.883209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3266.883217] RIP: 0033:0x7f15cb12cb19 [ 3266.883228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3266.883234] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3266.883246] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3266.883252] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3266.883259] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3266.883265] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3266.883271] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3266.924480] 9pnet: Insufficient options for proto=fd [ 3267.063422] FAULT_INJECTION: forcing a failure. [ 3267.063422] name failslab, interval 1, probability 0, space 0, times 0 [ 3267.063441] CPU: 0 PID: 15851 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3267.063448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3267.063452] Call Trace: [ 3267.063472] dump_stack+0x107/0x167 [ 3267.063485] should_fail.cold+0x5/0xa [ 3267.063498] ? create_object.isra.0+0x3a/0xa30 [ 3267.063509] should_failslab+0x5/0x20 [ 3267.063520] kmem_cache_alloc+0x5b/0x310 [ 3267.063532] ? percpu_ref_put_many.constprop.0+0x4e/0x110 17:31:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1900) 17:31:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 23) [ 3267.063544] create_object.isra.0+0x3a/0xa30 [ 3267.063553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3267.063566] kmem_cache_alloc+0x159/0x310 [ 3267.063580] security_file_alloc+0x34/0x170 17:31:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1300) [ 3267.063591] __alloc_file+0xb7/0x320 [ 3267.063601] alloc_empty_file+0x6d/0x170 [ 3267.063612] path_openat+0xe6/0x2770 [ 3267.063624] ? __lock_acquire+0x1657/0x5b00 [ 3267.063639] ? path_lookupat+0x860/0x860 [ 3267.063651] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3267.063665] ? lock_acquire+0x197/0x470 [ 3267.063675] ? find_held_lock+0x2c/0x110 [ 3267.063691] do_filp_open+0x190/0x3e0 [ 3267.063701] ? may_open_dev+0xf0/0xf0 [ 3267.063713] ? alloc_fd+0x2e7/0x670 [ 3267.063724] ? lock_downgrade+0x6d0/0x6d0 [ 3267.063733] ? do_raw_spin_lock+0x121/0x260 [ 3267.063742] ? rwlock_bug.part.0+0x90/0x90 [ 3267.063757] ? _raw_spin_unlock+0x1a/0x30 [ 3267.063766] ? alloc_fd+0x2e7/0x670 [ 3267.063782] do_sys_openat2+0x171/0x4d0 [ 3267.063794] ? build_open_flags+0x6f0/0x6f0 [ 3267.063809] ? rcu_read_lock_any_held+0x75/0xa0 [ 3267.063822] __x64_sys_openat+0x13f/0x1f0 [ 3267.063833] ? __ia32_sys_open+0x1c0/0x1c0 [ 3267.063847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3267.063859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3267.063871] do_syscall_64+0x33/0x40 [ 3267.063882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3267.063889] RIP: 0033:0x7fcd90e58a04 [ 3267.063900] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3267.063906] RSP: 002b:00007fcd8e41aed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3267.063918] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90e58a04 [ 3267.063924] RDX: 0000000000000002 RSI: 00007fcd8e41b000 RDI: 00000000ffffff9c [ 3267.063930] RBP: 00007fcd8e41b000 R08: 0000000000000000 R09: ffffffffffffffff [ 3267.063936] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3267.063942] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3267.085243] loop5: detected capacity change from 0 to 2048 [ 3267.092896] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3267.093562] 9pnet: Insufficient options for proto=fd [ 3267.132898] 9pnet: Insufficient options for proto=fd [ 3267.137775] FAULT_INJECTION: forcing a failure. [ 3267.137775] name failslab, interval 1, probability 0, space 0, times 0 [ 3267.137796] CPU: 1 PID: 15859 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3267.137806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3267.137813] Call Trace: [ 3267.137837] dump_stack+0x107/0x167 [ 3267.137858] should_fail.cold+0x5/0xa [ 3267.137879] ? __io_uring_add_tctx_node+0x15c/0x520 [ 3267.137897] should_failslab+0x5/0x20 [ 3267.137916] kmem_cache_alloc_trace+0x55/0x320 [ 3267.137940] __io_uring_add_tctx_node+0x15c/0x520 [ 3267.137959] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3267.137975] ? alloc_fd+0x2e7/0x670 [ 3267.138003] io_uring_setup+0x1fbb/0x2980 [ 3267.138038] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3267.138055] ? wait_for_completion_io+0x270/0x270 [ 3267.138094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3267.138114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3267.138135] do_syscall_64+0x33/0x40 [ 3267.138154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3267.138166] RIP: 0033:0x7f15cb12cb19 [ 3267.138184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3267.138194] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3267.138214] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3267.138225] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3267.138236] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3267.138247] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3267.138257] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3267.182348] FAULT_INJECTION: forcing a failure. [ 3267.182348] name failslab, interval 1, probability 0, space 0, times 0 [ 3267.182397] CPU: 0 PID: 15864 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3267.182403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3267.182407] Call Trace: [ 3267.182425] dump_stack+0x107/0x167 [ 3267.182438] should_fail.cold+0x5/0xa [ 3267.182469] ? __kthread_create_on_node+0xd1/0x400 [ 3267.182480] should_failslab+0x5/0x20 [ 3267.182492] kmem_cache_alloc_trace+0x55/0x320 [ 3267.182507] ? loop_info64_to_compat+0x5f0/0x5f0 [ 3267.182518] __kthread_create_on_node+0xd1/0x400 [ 3267.182529] ? __kthread_parkme+0x1d0/0x1d0 [ 3267.182546] ? __mutex_lock+0x4fe/0x10b0 [ 3267.182557] ? loop_configure+0xc8a/0x1410 [ 3267.182567] ? do_raw_spin_unlock+0x4f/0x220 [ 3267.182579] ? loop_info64_to_compat+0x5f0/0x5f0 [ 3267.182590] kthread_create_on_node+0xbb/0x100 [ 3267.182601] ? __kthread_create_on_node+0x400/0x400 [ 3267.182614] ? lockdep_init_map_type+0x2c7/0x780 [ 3267.182625] ? lockdep_init_map_type+0x2c7/0x780 [ 3267.182641] loop_configure+0x3e7/0x1410 [ 3267.182658] lo_ioctl+0xa57/0x16b0 [ 3267.182671] ? avc_has_extended_perms+0x7f1/0xf40 [ 3267.182683] ? loop_set_status_old+0x250/0x250 [ 3267.182696] ? avc_ss_reset+0x180/0x180 [ 3267.182707] ? find_held_lock+0x2c/0x110 [ 3267.182723] ? __lock_acquire+0xbb1/0x5b00 [ 3267.182757] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3267.182768] ? generic_block_fiemap+0x60/0x60 [ 3267.182778] ? lock_downgrade+0x6d0/0x6d0 [ 3267.182788] ? build_open_flags+0x6f0/0x6f0 [ 3267.182802] ? loop_set_status_old+0x250/0x250 [ 3267.182811] blkdev_ioctl+0x291/0x710 [ 3267.182822] ? blkdev_common_ioctl+0x1930/0x1930 [ 3267.182834] ? selinux_file_ioctl+0xb6/0x270 [ 3267.182847] block_ioctl+0xf9/0x140 [ 3267.182856] ? blkdev_read_iter+0x1c0/0x1c0 [ 3267.182867] __x64_sys_ioctl+0x19a/0x210 [ 3267.182880] do_syscall_64+0x33/0x40 [ 3267.182890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3267.182898] RIP: 0033:0x7fcd90ea58d7 [ 3267.182907] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3267.182913] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3267.182924] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3267.182930] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3267.182936] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3267.182941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3267.182947] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:32:02 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x36c, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:32:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) setxattr$trusted_overlay_nlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)={'L-', 0x2}, 0x16, 0x3) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:32:02 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182328, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:32:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x19, 0x0, &(0x7f0000000c80)) 17:32:02 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 55) 17:32:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 24) 17:32:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1a00) 17:32:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1400) [ 3282.159921] FAULT_INJECTION: forcing a failure. [ 3282.159921] name failslab, interval 1, probability 0, space 0, times 0 [ 3282.161643] CPU: 0 PID: 15887 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3282.161649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3282.161652] Call Trace: [ 3282.161669] dump_stack+0x107/0x167 [ 3282.161681] should_fail.cold+0x5/0xa [ 3282.161694] ? create_object.isra.0+0x3a/0xa30 [ 3282.161704] should_failslab+0x5/0x20 [ 3282.161714] kmem_cache_alloc+0x5b/0x310 [ 3282.161727] create_object.isra.0+0x3a/0xa30 [ 3282.161736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3282.161749] kmem_cache_alloc_trace+0x151/0x320 [ 3282.161764] ? loop_info64_to_compat+0x5f0/0x5f0 [ 3282.161776] __kthread_create_on_node+0xd1/0x400 [ 3282.161788] ? __kthread_parkme+0x1d0/0x1d0 [ 3282.161804] ? __mutex_lock+0x4fe/0x10b0 [ 3282.161816] ? loop_configure+0xc8a/0x1410 [ 3282.161826] ? do_raw_spin_unlock+0x4f/0x220 [ 3282.161837] ? loop_info64_to_compat+0x5f0/0x5f0 [ 3282.161848] kthread_create_on_node+0xbb/0x100 [ 3282.161860] ? __kthread_create_on_node+0x400/0x400 [ 3282.161872] ? lockdep_init_map_type+0x2c7/0x780 [ 3282.161884] ? lockdep_init_map_type+0x2c7/0x780 [ 3282.161899] loop_configure+0x3e7/0x1410 [ 3282.161916] lo_ioctl+0xa57/0x16b0 [ 3282.161928] ? avc_has_extended_perms+0x7f1/0xf40 [ 3282.161941] ? loop_set_status_old+0x250/0x250 [ 3282.161953] ? avc_ss_reset+0x180/0x180 [ 3282.161964] ? find_held_lock+0x2c/0x110 [ 3282.161980] ? __lock_acquire+0xbb1/0x5b00 [ 3282.162013] ? selinux_bprm_creds_for_exec+0xb60/0xb60 17:32:02 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 56) [ 3282.162024] ? generic_block_fiemap+0x60/0x60 [ 3282.162038] ? lock_downgrade+0x6d0/0x6d0 [ 3282.162048] ? build_open_flags+0x6f0/0x6f0 [ 3282.162061] ? loop_set_status_old+0x250/0x250 [ 3282.162071] blkdev_ioctl+0x291/0x710 [ 3282.162082] ? blkdev_common_ioctl+0x1930/0x1930 [ 3282.162094] ? selinux_file_ioctl+0xb6/0x270 [ 3282.162107] block_ioctl+0xf9/0x140 [ 3282.162116] ? blkdev_read_iter+0x1c0/0x1c0 [ 3282.162127] __x64_sys_ioctl+0x19a/0x210 [ 3282.162139] do_syscall_64+0x33/0x40 [ 3282.162150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3282.162157] RIP: 0033:0x7fcd90ea58d7 [ 3282.162168] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3282.162173] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3282.162185] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3282.162190] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3282.162196] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3282.162201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3282.162207] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3282.162741] FAULT_INJECTION: forcing a failure. [ 3282.162741] name failslab, interval 1, probability 0, space 0, times 0 [ 3282.162755] CPU: 1 PID: 15888 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3282.162762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3282.162766] Call Trace: [ 3282.162783] dump_stack+0x107/0x167 [ 3282.162794] should_fail.cold+0x5/0xa [ 3282.162808] ? create_object.isra.0+0x3a/0xa30 [ 3282.162819] should_failslab+0x5/0x20 [ 3282.162831] kmem_cache_alloc+0x5b/0x310 [ 3282.162843] create_object.isra.0+0x3a/0xa30 [ 3282.162853] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3282.162865] kmem_cache_alloc_trace+0x151/0x320 [ 3282.162881] __io_uring_add_tctx_node+0x15c/0x520 [ 3282.162892] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3282.162902] ? alloc_fd+0x2e7/0x670 [ 3282.162918] io_uring_setup+0x1fbb/0x2980 [ 3282.162932] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3282.162943] ? wait_for_completion_io+0x270/0x270 [ 3282.162966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3282.162982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3282.162995] do_syscall_64+0x33/0x40 [ 3282.163006] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3282.163012] RIP: 0033:0x7f15cb12cb19 [ 3282.163022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3282.163028] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3282.163039] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3282.163045] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3282.163051] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3282.163057] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3282.163063] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3282.178759] loop5: detected capacity change from 0 to 2048 [ 3282.204296] 9pnet: Insufficient options for proto=fd [ 3282.233501] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3282.261102] 9pnet: Insufficient options for proto=fd [ 3282.274663] FAULT_INJECTION: forcing a failure. [ 3282.274663] name failslab, interval 1, probability 0, space 0, times 0 [ 3282.277081] CPU: 0 PID: 15898 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3282.277981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3282.278936] Call Trace: [ 3282.279241] dump_stack+0x107/0x167 [ 3282.279659] should_fail.cold+0x5/0xa 17:32:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 25) [ 3282.280101] ? xas_alloc+0x336/0x440 [ 3282.280667] should_failslab+0x5/0x20 [ 3282.281104] kmem_cache_alloc+0x5b/0x310 [ 3282.281566] ? stack_trace_consume_entry+0x160/0x160 [ 3282.282149] xas_alloc+0x336/0x440 [ 3282.282554] xas_create+0x34a/0x10d0 [ 3282.282988] ? kernel_text_address+0xf2/0x120 [ 3282.283502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3282.284100] xas_store+0x8c/0x1c40 [ 3282.284513] __xa_store+0x164/0x2d0 [ 3282.284928] ? xa_delete_node+0x280/0x280 [ 3282.285401] ? trace_hardirqs_on+0x5b/0x180 [ 3282.285898] xa_store+0x31/0x50 [ 3282.286272] __io_uring_add_tctx_node+0x1cf/0x520 [ 3282.286829] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3282.287419] ? alloc_fd+0x2e7/0x670 [ 3282.287835] io_uring_setup+0x1fbb/0x2980 [ 3282.288306] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3282.288880] ? wait_for_completion_io+0x270/0x270 [ 3282.289435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3282.290025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3282.290608] do_syscall_64+0x33/0x40 [ 3282.291036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3282.291613] RIP: 0033:0x7f15cb12cb19 [ 3282.292036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3282.294104] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3282.294972] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3282.295777] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3282.296587] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3282.297393] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3282.298198] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3282.320625] FAULT_INJECTION: forcing a failure. 17:32:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x1a, 0x0, &(0x7f0000000c80)) [ 3282.320625] name failslab, interval 1, probability 0, space 0, times 0 [ 3282.322282] CPU: 0 PID: 15901 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3282.323145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3282.324076] Call Trace: [ 3282.324376] dump_stack+0x107/0x167 [ 3282.324790] should_fail.cold+0x5/0xa 17:32:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(r0, &(0x7f0000000000)='./mnt\x00', 0x40, 0x400002) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 3282.325226] ? __kernfs_new_node+0xd4/0x860 [ 3282.325782] should_failslab+0x5/0x20 [ 3282.326214] kmem_cache_alloc+0x5b/0x310 [ 3282.326682] __kernfs_new_node+0xd4/0x860 [ 3282.327160] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3282.327704] ? lock_chain_count+0x20/0x20 [ 3282.328179] ? update_load_avg+0x162/0x1870 [ 3282.328670] ? find_held_lock+0x2c/0x110 [ 3282.329131] kernfs_new_node+0x18d/0x250 [ 3282.329596] kernfs_create_dir_ns+0x49/0x160 [ 3282.330094] internal_create_group+0x793/0xba0 [ 3282.330622] ? set_user_nice.part.0+0x2fd/0x760 [ 3282.331155] ? sysfs_remove_group+0x170/0x170 [ 3282.331662] ? lockdep_init_map_type+0x2c7/0x780 [ 3282.332197] ? blk_queue_flag_set+0x22/0x30 [ 3282.332690] ? __loop_update_dio+0x2d2/0x690 [ 3282.333191] loop_configure+0x953/0x1410 [ 3282.333657] lo_ioctl+0xa57/0x16b0 [ 3282.334065] ? avc_has_extended_perms+0x7f1/0xf40 [ 3282.334624] ? loop_set_status_old+0x250/0x250 [ 3282.335146] ? avc_ss_reset+0x180/0x180 [ 3282.335598] ? find_held_lock+0x2c/0x110 [ 3282.336061] ? __lock_acquire+0xbb1/0x5b00 [ 3282.336566] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3282.337162] ? generic_block_fiemap+0x60/0x60 [ 3282.337668] ? lock_downgrade+0x6d0/0x6d0 [ 3282.338137] ? build_open_flags+0x6f0/0x6f0 [ 3282.338638] ? loop_set_status_old+0x250/0x250 [ 3282.339159] blkdev_ioctl+0x291/0x710 [ 3282.339592] ? blkdev_common_ioctl+0x1930/0x1930 [ 3282.340134] ? selinux_file_ioctl+0xb6/0x270 [ 3282.340635] block_ioctl+0xf9/0x140 [ 3282.341047] ? blkdev_read_iter+0x1c0/0x1c0 [ 3282.341540] __x64_sys_ioctl+0x19a/0x210 [ 3282.342000] do_syscall_64+0x33/0x40 [ 3282.342437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3282.343025] RIP: 0033:0x7fcd90ea58d7 [ 3282.343451] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3282.345540] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3282.346408] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3282.347226] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3282.348035] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3282.348843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3282.349653] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3282.351827] loop5: detected capacity change from 0 to 2048 [ 3282.362075] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:32:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 26) 17:32:03 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 57) [ 3282.404309] 9pnet: Insufficient options for proto=fd [ 3282.408662] FAULT_INJECTION: forcing a failure. [ 3282.408662] name failslab, interval 1, probability 0, space 0, times 0 [ 3282.409982] CPU: 0 PID: 15909 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3282.410812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3282.411860] Call Trace: [ 3282.412171] dump_stack+0x107/0x167 [ 3282.412597] should_fail.cold+0x5/0xa [ 3282.413042] ? create_object.isra.0+0x3a/0xa30 [ 3282.413579] should_failslab+0x5/0x20 [ 3282.414019] kmem_cache_alloc+0x5b/0x310 [ 3282.414497] create_object.isra.0+0x3a/0xa30 [ 3282.415024] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3282.415619] kmem_cache_alloc+0x159/0x310 [ 3282.416108] xas_alloc+0x336/0x440 [ 3282.416524] xas_create+0x34a/0x10d0 [ 3282.416964] ? kernel_text_address+0xf2/0x120 [ 3282.417497] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3282.418109] xas_store+0x8c/0x1c40 [ 3282.418537] __xa_store+0x164/0x2d0 [ 3282.418980] ? xa_delete_node+0x280/0x280 [ 3282.419472] ? trace_hardirqs_on+0x5b/0x180 [ 3282.419990] xa_store+0x31/0x50 [ 3282.420376] __io_uring_add_tctx_node+0x1cf/0x520 [ 3282.420940] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3282.421546] ? alloc_fd+0x2e7/0x670 [ 3282.421973] io_uring_setup+0x1fbb/0x2980 [ 3282.422455] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3282.423046] ? wait_for_completion_io+0x270/0x270 [ 3282.423612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3282.424216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3282.424812] do_syscall_64+0x33/0x40 [ 3282.425242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3282.425829] RIP: 0033:0x7f15cb12cb19 17:32:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x1d, 0x0, &(0x7f0000000c80)) [ 3282.426263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3282.428465] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3282.429342] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3282.430160] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3282.430986] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3282.431804] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3282.432627] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3282.449941] FAULT_INJECTION: forcing a failure. [ 3282.449941] name failslab, interval 1, probability 0, space 0, times 0 [ 3282.451420] CPU: 0 PID: 15914 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3282.452210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3282.453155] Call Trace: [ 3282.453459] dump_stack+0x107/0x167 [ 3282.453872] should_fail.cold+0x5/0xa [ 3282.454304] ? create_object.isra.0+0x3a/0xa30 [ 3282.454831] should_failslab+0x5/0x20 [ 3282.455263] kmem_cache_alloc+0x5b/0x310 [ 3282.455727] create_object.isra.0+0x3a/0xa30 [ 3282.456223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3282.456797] kmem_cache_alloc+0x159/0x310 [ 3282.457302] __kernfs_new_node+0xd4/0x860 [ 3282.457829] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3282.458369] ? lock_acquire+0x197/0x470 [ 3282.458829] ? lock_chain_count+0x20/0x20 [ 3282.459302] ? lock_acquire+0x197/0x470 [ 3282.459750] ? task_rq_lock+0xab/0x270 [ 3282.460193] ? lock_release+0x680/0x680 [ 3282.460642] ? find_held_lock+0x2c/0x110 [ 3282.461106] kernfs_new_node+0x18d/0x250 [ 3282.461569] kernfs_create_dir_ns+0x49/0x160 [ 3282.462072] internal_create_group+0x793/0xba0 [ 3282.462592] ? set_user_nice.part.0+0x2fd/0x760 [ 3282.463126] ? sysfs_remove_group+0x170/0x170 [ 3282.463636] ? lockdep_init_map_type+0x2c7/0x780 [ 3282.464176] ? blk_queue_flag_set+0x22/0x30 [ 3282.464663] ? __loop_update_dio+0x2d2/0x690 [ 3282.465166] loop_configure+0x953/0x1410 [ 3282.465634] lo_ioctl+0xa57/0x16b0 [ 3282.466040] ? avc_has_extended_perms+0x7f1/0xf40 [ 3282.466588] ? loop_set_status_old+0x250/0x250 [ 3282.467114] ? avc_ss_reset+0x180/0x180 [ 3282.467565] ? find_held_lock+0x2c/0x110 [ 3282.468033] ? __lock_acquire+0xbb1/0x5b00 [ 3282.468537] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3282.469130] ? generic_block_fiemap+0x60/0x60 [ 3282.469638] ? lock_downgrade+0x6d0/0x6d0 [ 3282.470106] ? build_open_flags+0x6f0/0x6f0 17:32:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1500) [ 3282.470599] ? loop_set_status_old+0x250/0x250 [ 3282.471249] blkdev_ioctl+0x291/0x710 [ 3282.471684] ? blkdev_common_ioctl+0x1930/0x1930 [ 3282.472222] ? selinux_file_ioctl+0xb6/0x270 [ 3282.472720] block_ioctl+0xf9/0x140 [ 3282.473132] ? blkdev_read_iter+0x1c0/0x1c0 [ 3282.473622] __x64_sys_ioctl+0x19a/0x210 [ 3282.474094] do_syscall_64+0x33/0x40 [ 3282.474515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3282.475105] RIP: 0033:0x7fcd90ea58d7 [ 3282.475526] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3282.477606] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3282.478470] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3282.479285] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3282.480099] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3282.480909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3282.481713] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3282.502444] 9pnet: Insufficient options for proto=fd [ 3282.522800] loop5: detected capacity change from 0 to 2048 [ 3282.533965] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:32:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x1e, 0x0, &(0x7f0000000c80)) 17:32:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, r0, 0xb) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x17, &(0x7f0000000040), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x100, 0x1000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x400000000000000) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[]) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 17:32:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1b00) 17:32:16 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x3b6, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:32:16 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x4018232a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3295.450326] FAULT_INJECTION: forcing a failure. [ 3295.450326] name failslab, interval 1, probability 0, space 0, times 0 [ 3295.452829] CPU: 1 PID: 15940 Comm: syz-executor.4 Not tainted 5.10.260 #1 17:32:16 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 58) 17:32:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 27) 17:32:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1600) [ 3295.454308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3295.456262] Call Trace: [ 3295.456822] dump_stack+0x107/0x167 [ 3295.457593] should_fail.cold+0x5/0xa [ 3295.458399] ? xas_alloc+0x336/0x440 [ 3295.459411] should_failslab+0x5/0x20 [ 3295.460218] kmem_cache_alloc+0x5b/0x310 [ 3295.461081] xas_alloc+0x336/0x440 [ 3295.461843] xas_create+0x34a/0x10d0 [ 3295.462484] FAULT_INJECTION: forcing a failure. [ 3295.462484] name failslab, interval 1, probability 0, space 0, times 0 [ 3295.462638] ? kernel_text_address+0xf2/0x120 [ 3295.462690] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3295.462712] xas_store+0x8c/0x1c40 [ 3295.468032] __xa_store+0x164/0x2d0 [ 3295.468796] ? xa_delete_node+0x280/0x280 [ 3295.469681] ? trace_hardirqs_on+0x5b/0x180 [ 3295.470599] xa_store+0x31/0x50 [ 3295.471301] __io_uring_add_tctx_node+0x1cf/0x520 [ 3295.472320] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3295.473419] ? alloc_fd+0x2e7/0x670 [ 3295.474189] io_uring_setup+0x1fbb/0x2980 [ 3295.475079] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3295.476139] ? wait_for_completion_io+0x270/0x270 [ 3295.477163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3295.478269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3295.479358] do_syscall_64+0x33/0x40 [ 3295.480136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3295.481213] RIP: 0033:0x7f15cb12cb19 [ 3295.481990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3295.485844] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3295.487445] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3295.488927] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3295.490413] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3295.491923] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3295.493411] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3295.494938] CPU: 0 PID: 15944 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3295.496406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3295.498138] Call Trace: [ 3295.498699] dump_stack+0x107/0x167 [ 3295.499471] should_fail.cold+0x5/0xa [ 3295.500350] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3295.500370] should_failslab+0x5/0x20 [ 3295.500390] kmem_cache_alloc+0x5b/0x310 [ 3295.500419] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3295.500442] idr_get_free+0x4b5/0x8f0 [ 3295.500477] idr_alloc_u32+0x184/0x300 [ 3295.500501] ? __fprop_inc_percpu_max+0x130/0x130 [ 3295.500525] ? lock_acquire+0x197/0x470 [ 3295.500542] ? __kernfs_new_node+0xff/0x860 [ 3295.500569] idr_alloc_cyclic+0x102/0x230 [ 3295.500590] ? idr_alloc+0x130/0x130 [ 3295.500605] ? rwlock_bug.part.0+0x90/0x90 [ 3295.500633] __kernfs_new_node+0x117/0x860 [ 3295.500656] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3295.500677] ? lock_chain_count+0x20/0x20 17:32:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 28) [ 3295.500707] ? update_load_avg+0x162/0x1870 [ 3295.500725] ? find_held_lock+0x2c/0x110 [ 3295.500748] kernfs_new_node+0x18d/0x250 [ 3295.500773] kernfs_create_dir_ns+0x49/0x160 [ 3295.500796] internal_create_group+0x793/0xba0 [ 3295.500822] ? set_user_nice.part.0+0x2fd/0x760 [ 3295.500841] ? sysfs_remove_group+0x170/0x170 [ 3295.500864] ? lockdep_init_map_type+0x2c7/0x780 [ 3295.500884] ? blk_queue_flag_set+0x22/0x30 [ 3295.500903] ? __loop_update_dio+0x2d2/0x690 [ 3295.500927] loop_configure+0x953/0x1410 [ 3295.500960] lo_ioctl+0xa57/0x16b0 [ 3295.500983] ? avc_has_extended_perms+0x7f1/0xf40 [ 3295.501007] ? loop_set_status_old+0x250/0x250 [ 3295.501031] ? avc_ss_reset+0x180/0x180 17:32:16 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 59) [ 3295.501052] ? find_held_lock+0x2c/0x110 [ 3295.501084] ? __lock_acquire+0xbb1/0x5b00 [ 3295.501150] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3295.501171] ? generic_block_fiemap+0x60/0x60 [ 3295.501190] ? lock_downgrade+0x6d0/0x6d0 [ 3295.501209] ? build_open_flags+0x6f0/0x6f0 [ 3295.501235] ? loop_set_status_old+0x250/0x250 [ 3295.501252] blkdev_ioctl+0x291/0x710 [ 3295.501273] ? blkdev_common_ioctl+0x1930/0x1930 [ 3295.501297] ? selinux_file_ioctl+0xb6/0x270 [ 3295.501321] block_ioctl+0xf9/0x140 [ 3295.501339] ? blkdev_read_iter+0x1c0/0x1c0 [ 3295.501359] __x64_sys_ioctl+0x19a/0x210 17:32:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x21, 0x0, &(0x7f0000000c80)) [ 3295.501383] do_syscall_64+0x33/0x40 17:32:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 29) [ 3295.501404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3295.501417] RIP: 0033:0x7fcd90ea58d7 [ 3295.501434] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:32:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1c00) [ 3295.501445] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3295.501466] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3295.501478] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3295.501488] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3295.501499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3295.501510] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:32:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1700) [ 3295.502093] loop5: detected capacity change from 0 to 2048 17:32:16 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 60) [ 3295.517658] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3295.698546] FAULT_INJECTION: forcing a failure. [ 3295.698546] name failslab, interval 1, probability 0, space 0, times 0 [ 3295.698568] CPU: 1 PID: 15957 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3295.698579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3295.698585] Call Trace: [ 3295.698611] dump_stack+0x107/0x167 [ 3295.698633] should_fail.cold+0x5/0xa [ 3295.698655] ? create_object.isra.0+0x3a/0xa30 [ 3295.698673] should_failslab+0x5/0x20 [ 3295.698692] kmem_cache_alloc+0x5b/0x310 [ 3295.698717] create_object.isra.0+0x3a/0xa30 [ 3295.698733] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3295.698758] kmem_cache_alloc+0x159/0x310 [ 3295.698802] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3295.698824] idr_get_free+0x4b5/0x8f0 [ 3295.698859] idr_alloc_u32+0x184/0x300 [ 3295.698882] ? __fprop_inc_percpu_max+0x130/0x130 [ 3295.698907] ? lock_acquire+0x197/0x470 [ 3295.698925] ? __kernfs_new_node+0xff/0x860 [ 3295.698954] idr_alloc_cyclic+0x102/0x230 [ 3295.698975] ? idr_alloc+0x130/0x130 [ 3295.698990] ? rwlock_bug.part.0+0x90/0x90 [ 3295.699019] __kernfs_new_node+0x117/0x860 [ 3295.699046] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3295.699064] ? lock_acquire+0x197/0x470 [ 3295.699085] ? lock_chain_count+0x20/0x20 [ 3295.699107] ? lock_acquire+0x197/0x470 [ 3295.699124] ? task_rq_lock+0xab/0x270 [ 3295.699149] ? lock_release+0x680/0x680 [ 3295.699168] ? find_held_lock+0x2c/0x110 [ 3295.699191] kernfs_new_node+0x18d/0x250 [ 3295.699216] kernfs_create_dir_ns+0x49/0x160 [ 3295.699239] internal_create_group+0x793/0xba0 [ 3295.699266] ? set_user_nice.part.0+0x2fd/0x760 [ 3295.699284] ? sysfs_remove_group+0x170/0x170 [ 3295.699306] ? lockdep_init_map_type+0x2c7/0x780 [ 3295.699326] ? blk_queue_flag_set+0x22/0x30 [ 3295.699344] ? __loop_update_dio+0x2d2/0x690 [ 3295.699369] loop_configure+0x953/0x1410 [ 3295.699400] lo_ioctl+0xa57/0x16b0 [ 3295.699423] ? avc_has_extended_perms+0x7f1/0xf40 [ 3295.699447] ? loop_set_status_old+0x250/0x250 [ 3295.699470] ? avc_ss_reset+0x180/0x180 [ 3295.699491] ? find_held_lock+0x2c/0x110 [ 3295.699522] ? __lock_acquire+0xbb1/0x5b00 [ 3295.699586] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3295.699606] ? generic_block_fiemap+0x60/0x60 [ 3295.699624] ? lock_downgrade+0x6d0/0x6d0 [ 3295.699642] ? build_open_flags+0x6f0/0x6f0 [ 3295.699668] ? loop_set_status_old+0x250/0x250 [ 3295.699684] blkdev_ioctl+0x291/0x710 [ 3295.699704] ? blkdev_common_ioctl+0x1930/0x1930 [ 3295.699727] ? selinux_file_ioctl+0xb6/0x270 [ 3295.699751] block_ioctl+0xf9/0x140 [ 3295.699768] ? blkdev_read_iter+0x1c0/0x1c0 [ 3295.699788] __x64_sys_ioctl+0x19a/0x210 [ 3295.699811] do_syscall_64+0x33/0x40 [ 3295.699831] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3295.699844] RIP: 0033:0x7fcd90ea58d7 [ 3295.699862] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3295.699873] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3295.699892] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3295.699903] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3295.699913] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3295.699924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3295.699935] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3295.703458] loop5: detected capacity change from 0 to 2048 [ 3295.737903] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3295.878613] FAULT_INJECTION: forcing a failure. [ 3295.878613] name failslab, interval 1, probability 0, space 0, times 0 [ 3295.878636] CPU: 0 PID: 15961 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3295.878646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3295.878653] Call Trace: [ 3295.878678] dump_stack+0x107/0x167 [ 3295.878699] should_fail.cold+0x5/0xa [ 3295.878721] ? create_object.isra.0+0x3a/0xa30 [ 3295.878738] should_failslab+0x5/0x20 [ 3295.878776] kmem_cache_alloc+0x5b/0x310 [ 3295.878796] ? mark_held_locks+0x9e/0xe0 [ 3295.878818] create_object.isra.0+0x3a/0xa30 [ 3295.878833] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3295.878857] kmem_cache_alloc+0x159/0x310 [ 3295.878883] xas_alloc+0x336/0x440 [ 3295.878904] xas_create+0x34a/0x10d0 [ 3295.878930] ? kernel_text_address+0xf2/0x120 [ 3295.878950] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3295.878972] xas_store+0x8c/0x1c40 [ 3295.879004] __xa_store+0x164/0x2d0 [ 3295.879024] ? xa_delete_node+0x280/0x280 [ 3295.879050] ? trace_hardirqs_on+0x5b/0x180 [ 3295.879075] xa_store+0x31/0x50 [ 3295.879097] __io_uring_add_tctx_node+0x1cf/0x520 [ 3295.879116] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3295.879132] ? alloc_fd+0x2e7/0x670 [ 3295.879161] io_uring_setup+0x1fbb/0x2980 [ 3295.879188] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3295.879204] ? wait_for_completion_io+0x270/0x270 [ 3295.879244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3295.879264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3295.879285] do_syscall_64+0x33/0x40 [ 3295.879304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3295.879317] RIP: 0033:0x7f15cb12cb19 [ 3295.879335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3295.879345] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3295.879365] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3295.879377] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3295.879387] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3295.879398] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3295.879408] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3295.962257] FAULT_INJECTION: forcing a failure. [ 3295.962257] name failslab, interval 1, probability 0, space 0, times 0 [ 3296.080723] CPU: 0 PID: 15968 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3296.080733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3296.080739] Call Trace: [ 3296.080765] dump_stack+0x107/0x167 [ 3296.080787] should_fail.cold+0x5/0xa [ 3296.080813] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3296.080831] should_failslab+0x5/0x20 [ 3296.080859] kmem_cache_alloc+0x5b/0x310 [ 3296.088970] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3296.090149] idr_get_free+0x4b5/0x8f0 [ 3296.090969] idr_alloc_u32+0x184/0x300 [ 3296.091793] ? __fprop_inc_percpu_max+0x130/0x130 [ 3296.092823] ? lock_acquire+0x197/0x470 [ 3296.093658] ? __kernfs_new_node+0xff/0x860 [ 3296.094564] idr_alloc_cyclic+0x102/0x230 [ 3296.095447] ? idr_alloc+0x130/0x130 [ 3296.096224] ? rwlock_bug.part.0+0x90/0x90 [ 3296.097121] __kernfs_new_node+0x117/0x860 [ 3296.098016] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3296.099014] ? lock_acquire+0x197/0x470 [ 3296.099849] ? lock_chain_count+0x20/0x20 [ 3296.100726] ? lock_acquire+0x197/0x470 [ 3296.101560] ? task_rq_lock+0xab/0x270 [ 3296.102378] ? lock_release+0x680/0x680 [ 3296.103217] ? find_held_lock+0x2c/0x110 [ 3296.104068] kernfs_new_node+0x18d/0x250 [ 3296.104924] kernfs_create_dir_ns+0x49/0x160 [ 3296.105861] internal_create_group+0x793/0xba0 [ 3296.106834] ? set_user_nice.part.0+0x2fd/0x760 [ 3296.107817] ? sysfs_remove_group+0x170/0x170 [ 3296.108764] ? lockdep_init_map_type+0x2c7/0x780 [ 3296.109754] ? blk_queue_flag_set+0x22/0x30 [ 3296.110665] ? __loop_update_dio+0x2d2/0x690 [ 3296.111608] loop_configure+0x953/0x1410 [ 3296.112473] lo_ioctl+0xa57/0x16b0 [ 3296.113227] ? avc_has_extended_perms+0x7f1/0xf40 [ 3296.114253] ? loop_set_status_old+0x250/0x250 [ 3296.115225] ? avc_ss_reset+0x180/0x180 [ 3296.116057] ? find_held_lock+0x2c/0x110 [ 3296.116925] ? __lock_acquire+0xbb1/0x5b00 [ 3296.117854] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3296.118968] ? generic_block_fiemap+0x60/0x60 [ 3296.119917] ? lock_downgrade+0x6d0/0x6d0 [ 3296.120791] ? build_open_flags+0x6f0/0x6f0 [ 3296.121701] ? loop_set_status_old+0x250/0x250 [ 3296.122663] blkdev_ioctl+0x291/0x710 [ 3296.123473] ? blkdev_common_ioctl+0x1930/0x1930 [ 3296.124467] ? selinux_file_ioctl+0xb6/0x270 [ 3296.125403] block_ioctl+0xf9/0x140 [ 3296.126167] ? blkdev_read_iter+0x1c0/0x1c0 [ 3296.127083] __x64_sys_ioctl+0x19a/0x210 [ 3296.127939] do_syscall_64+0x33/0x40 [ 3296.128714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3296.129777] RIP: 0033:0x7fcd90ea58d7 [ 3296.130543] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3296.134388] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3296.135989] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3296.137470] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3296.138962] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3296.140455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3296.141938] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:32:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x30, 0x0, &(0x7f0000000c80)) [ 3296.157237] loop5: detected capacity change from 0 to 2048 [ 3296.181747] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3296.183406] FAULT_INJECTION: forcing a failure. [ 3296.183406] name failslab, interval 1, probability 0, space 0, times 0 [ 3296.185844] CPU: 0 PID: 15975 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3296.187278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3296.189136] Call Trace: [ 3296.189677] dump_stack+0x107/0x167 [ 3296.190420] should_fail.cold+0x5/0xa [ 3296.191206] ? xas_alloc+0x336/0x440 [ 3296.191962] should_failslab+0x5/0x20 [ 3296.192742] kmem_cache_alloc+0x5b/0x310 [ 3296.193568] xas_alloc+0x336/0x440 [ 3296.194297] xas_create+0x34a/0x10d0 [ 3296.195080] ? kernel_text_address+0xf2/0x120 [ 3296.195987] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3296.197040] xas_store+0x8c/0x1c40 [ 3296.197775] __xa_store+0x164/0x2d0 [ 3296.198520] ? xa_delete_node+0x280/0x280 [ 3296.199374] ? trace_hardirqs_on+0x5b/0x180 [ 3296.200255] xa_store+0x31/0x50 [ 3296.200926] __io_uring_add_tctx_node+0x1cf/0x520 [ 3296.201897] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3296.202960] ? alloc_fd+0x2e7/0x670 [ 3296.203711] io_uring_setup+0x1fbb/0x2980 [ 3296.204558] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3296.205583] ? wait_for_completion_io+0x270/0x270 [ 3296.206590] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3296.207666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3296.208702] do_syscall_64+0x33/0x40 [ 3296.209466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3296.210497] RIP: 0033:0x7f15cb12cb19 [ 3296.211263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3296.215006] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3296.216550] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3296.217990] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3296.219442] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3296.220887] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3296.222311] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:32:17 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 61) [ 3296.422278] FAULT_INJECTION: forcing a failure. [ 3296.422278] name failslab, interval 1, probability 0, space 0, times 0 [ 3296.424503] CPU: 0 PID: 15984 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3296.425810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3296.427309] Call Trace: [ 3296.427787] dump_stack+0x107/0x167 [ 3296.428441] should_fail.cold+0x5/0xa [ 3296.429123] ? create_object.isra.0+0x3a/0xa30 [ 3296.429937] should_failslab+0x5/0x20 [ 3296.430623] kmem_cache_alloc+0x5b/0x310 [ 3296.431366] ? mark_held_locks+0x9e/0xe0 [ 3296.432106] create_object.isra.0+0x3a/0xa30 [ 3296.432885] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3296.433789] kmem_cache_alloc+0x159/0x310 [ 3296.434525] xas_alloc+0x336/0x440 [ 3296.435179] xas_create+0x34a/0x10d0 [ 3296.435843] ? kernel_text_address+0xf2/0x120 [ 3296.436654] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3296.437585] xas_store+0x8c/0x1c40 [ 3296.438229] __xa_store+0x164/0x2d0 [ 3296.438893] ? xa_delete_node+0x280/0x280 [ 3296.439630] ? trace_hardirqs_on+0x5b/0x180 [ 3296.440393] xa_store+0x31/0x50 [ 3296.440978] __io_uring_add_tctx_node+0x1cf/0x520 [ 3296.441846] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3296.442767] ? alloc_fd+0x2e7/0x670 [ 3296.443450] io_uring_setup+0x1fbb/0x2980 [ 3296.444197] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3296.445102] ? wait_for_completion_io+0x270/0x270 [ 3296.445973] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3296.446922] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3296.447843] do_syscall_64+0x33/0x40 [ 3296.448504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3296.449424] RIP: 0033:0x7f15cb12cb19 [ 3296.450081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3296.453390] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3296.454735] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3296.455997] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3296.457245] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3296.458504] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3296.459770] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:32:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 30) 17:32:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:32:29 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x3c2, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:32:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1d00) 17:32:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x31, 0x0, &(0x7f0000000c80)) 17:32:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1800) 17:32:29 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182338, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:32:29 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 62) [ 3308.752773] FAULT_INJECTION: forcing a failure. [ 3308.752773] name failslab, interval 1, probability 0, space 0, times 0 [ 3308.754189] CPU: 0 PID: 16007 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3308.755038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3308.756049] Call Trace: [ 3308.756378] dump_stack+0x107/0x167 [ 3308.756823] should_fail.cold+0x5/0xa [ 3308.757288] ? xas_alloc+0x336/0x440 [ 3308.757748] should_failslab+0x5/0x20 [ 3308.758224] kmem_cache_alloc+0x5b/0x310 [ 3308.758726] xas_alloc+0x336/0x440 [ 3308.759172] xas_create+0x34a/0x10d0 [ 3308.759646] ? kernel_text_address+0xf2/0x120 [ 3308.760198] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3308.760841] xas_store+0x8c/0x1c40 [ 3308.761281] __xa_store+0x164/0x2d0 17:32:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x33, 0x0, &(0x7f0000000c80)) [ 3308.761729] ? xa_delete_node+0x280/0x280 [ 3308.762363] ? trace_hardirqs_on+0x5b/0x180 [ 3308.762917] xa_store+0x31/0x50 [ 3308.763332] __io_uring_add_tctx_node+0x1cf/0x520 [ 3308.763918] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3308.764414] 9pnet: Insufficient options for proto=fd [ 3308.764554] ? alloc_fd+0x2e7/0x670 [ 3308.764573] io_uring_setup+0x1fbb/0x2980 [ 3308.766595] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3308.767223] ? wait_for_completion_io+0x270/0x270 [ 3308.767827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3308.768465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3308.769098] do_syscall_64+0x33/0x40 [ 3308.769560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3308.770184] RIP: 0033:0x7f15cb12cb19 [ 3308.770636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3308.772883] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3308.773811] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3308.774681] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3308.775551] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3308.776413] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3308.777277] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3308.795615] FAULT_INJECTION: forcing a failure. [ 3308.795615] name failslab, interval 1, probability 0, space 0, times 0 [ 3308.797813] CPU: 0 PID: 16009 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3308.798650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3308.799655] Call Trace: [ 3308.799977] dump_stack+0x107/0x167 [ 3308.800418] should_fail.cold+0x5/0xa [ 3308.800885] ? create_object.isra.0+0x3a/0xa30 [ 3308.801436] should_failslab+0x5/0x20 [ 3308.801897] kmem_cache_alloc+0x5b/0x310 [ 3308.802384] ? mark_held_locks+0x9e/0xe0 [ 3308.802873] create_object.isra.0+0x3a/0xa30 [ 3308.803408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3308.804020] kmem_cache_alloc+0x159/0x310 [ 3308.804531] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3308.805213] idr_get_free+0x4b5/0x8f0 [ 3308.805682] idr_alloc_u32+0x184/0x300 [ 3308.806153] ? __fprop_inc_percpu_max+0x130/0x130 [ 3308.806734] ? lock_acquire+0x197/0x470 [ 3308.807224] ? __kernfs_new_node+0xff/0x860 [ 3308.807756] idr_alloc_cyclic+0x102/0x230 [ 3308.808257] ? idr_alloc+0x130/0x130 [ 3308.808700] ? rwlock_bug.part.0+0x90/0x90 [ 3308.809225] __kernfs_new_node+0x117/0x860 [ 3308.809731] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3308.810301] ? lock_acquire+0x197/0x470 [ 3308.810775] ? lock_chain_count+0x20/0x20 [ 3308.811278] ? lock_acquire+0x197/0x470 [ 3308.811751] ? task_rq_lock+0xab/0x270 [ 3308.812220] ? lock_release+0x680/0x680 [ 3308.812691] ? find_held_lock+0x2c/0x110 [ 3308.813182] kernfs_new_node+0x18d/0x250 [ 3308.813669] kernfs_create_dir_ns+0x49/0x160 [ 3308.814199] internal_create_group+0x793/0xba0 [ 3308.814748] ? set_user_nice.part.0+0x2fd/0x760 [ 3308.815306] ? sysfs_remove_group+0x170/0x170 [ 3308.815838] ? lockdep_init_map_type+0x2c7/0x780 [ 3308.816404] ? blk_queue_flag_set+0x22/0x30 [ 3308.816924] ? __loop_update_dio+0x2d2/0x690 [ 3308.817450] loop_configure+0x953/0x1410 [ 3308.817943] lo_ioctl+0xa57/0x16b0 [ 3308.818372] ? avc_has_extended_perms+0x7f1/0xf40 [ 3308.818954] ? loop_set_status_old+0x250/0x250 [ 3308.819502] ? avc_ss_reset+0x180/0x180 [ 3308.819975] ? find_held_lock+0x2c/0x110 [ 3308.820464] ? __lock_acquire+0xbb1/0x5b00 [ 3308.820992] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3308.821618] ? generic_block_fiemap+0x60/0x60 [ 3308.822150] ? lock_downgrade+0x6d0/0x6d0 [ 3308.822643] ? build_open_flags+0x6f0/0x6f0 [ 3308.823179] ? loop_set_status_old+0x250/0x250 [ 3308.823722] blkdev_ioctl+0x291/0x710 [ 3308.824182] ? blkdev_common_ioctl+0x1930/0x1930 [ 3308.824748] ? selinux_file_ioctl+0xb6/0x270 [ 3308.825281] block_ioctl+0xf9/0x140 [ 3308.825715] ? blkdev_read_iter+0x1c0/0x1c0 [ 3308.826227] __x64_sys_ioctl+0x19a/0x210 [ 3308.826713] do_syscall_64+0x33/0x40 [ 3308.827166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3308.827770] RIP: 0033:0x7fcd90ea58d7 [ 3308.828212] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3308.830283] 9pnet: Insufficient options for proto=fd [ 3308.830392] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3308.830404] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3308.830411] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3308.830427] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3308.835057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3308.835897] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3308.845844] loop5: detected capacity change from 0 to 2048 [ 3308.857560] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:32:29 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 63) [ 3308.963482] FAULT_INJECTION: forcing a failure. 17:32:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 31) [ 3308.963482] name failslab, interval 1, probability 0, space 0, times 0 [ 3308.965002] CPU: 0 PID: 16024 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3308.965789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3308.966734] Call Trace: [ 3308.967057] dump_stack+0x107/0x167 [ 3308.967479] should_fail.cold+0x5/0xa [ 3308.967915] ? ___slab_alloc+0x155/0x700 [ 3308.968384] ? create_object.isra.0+0x3a/0xa30 [ 3308.968915] should_failslab+0x5/0x20 [ 3308.969352] kmem_cache_alloc+0x5b/0x310 [ 3308.969817] create_object.isra.0+0x3a/0xa30 17:32:29 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd, 0x3, &(0x7f0000000680)=""/120, 0x78, 0x15}, 0xff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000006d6e742f656e637579707465645f646972005a19f1949774e585ca5ae957fdfaeb5178afb5fc2ea7de6cb77a33044db42bba8a2bdc9d7fcd910cef1bd8d89e571cb426c586dabf129eca1c2cde93809bca22ba635d3d4118777628fb83fa01e49b79a4240510be2b63db5b1588e939ff5f65562bf5da5027def8d76e202e57e3e8b31410f754c8569ab5c3374b8db667fb83586e760c19ff22dedbfd35701819db4220efec34829c19201f73"]) syz_io_uring_setup(0x3872, &(0x7f0000000740), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f01a65c99c34a43a160744b7d98b911c164697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r7}}, 0x80000001) r8 = syz_io_uring_setup(0x0, &(0x7f00000007c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) [ 3308.970314] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3308.970994] kmem_cache_alloc+0x159/0x310 [ 3308.971484] xas_alloc+0x336/0x440 [ 3308.971893] xas_create+0x34a/0x10d0 [ 3308.972324] ? kernel_text_address+0xf2/0x120 [ 3308.972842] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3308.973440] xas_store+0x8c/0x1c40 [ 3308.973849] __xa_store+0x164/0x2d0 [ 3308.974265] ? xa_delete_node+0x280/0x280 [ 3308.974762] ? trace_hardirqs_on+0x5b/0x180 [ 3308.975351] xa_store+0x31/0x50 [ 3308.975733] __io_uring_add_tctx_node+0x1cf/0x520 [ 3308.976278] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3308.976872] ? alloc_fd+0x2e7/0x670 [ 3308.977290] io_uring_setup+0x1fbb/0x2980 [ 3308.977764] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3308.978339] ? wait_for_completion_io+0x270/0x270 [ 3308.978899] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3308.979504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3308.980091] do_syscall_64+0x33/0x40 [ 3308.980515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3308.981096] RIP: 0033:0x7f15cb12cb19 [ 3308.981518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3308.983621] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3308.984486] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3308.985298] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3308.986107] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3308.986930] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3308.987752] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3309.057327] FAULT_INJECTION: forcing a failure. [ 3309.057327] name failslab, interval 1, probability 0, space 0, times 0 [ 3309.059975] CPU: 1 PID: 16027 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3309.061523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3309.063401] Call Trace: [ 3309.064004] dump_stack+0x107/0x167 [ 3309.064822] should_fail.cold+0x5/0xa [ 3309.065687] ? __kernfs_new_node+0xd4/0x860 [ 3309.066660] should_failslab+0x5/0x20 [ 3309.067533] kmem_cache_alloc+0x5b/0x310 [ 3309.068550] __kernfs_new_node+0xd4/0x860 [ 3309.069635] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3309.070701] ? kernfs_add_one+0x36e/0x4d0 [ 3309.071657] ? mutex_lock_io_nested+0xf30/0xf30 [ 3309.072710] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3309.073801] kernfs_new_node+0x18d/0x250 [ 3309.074714] __kernfs_create_file+0x51/0x350 [ 3309.075714] sysfs_add_file_mode_ns+0x221/0x560 [ 3309.076765] internal_create_group+0x324/0xba0 [ 3309.077786] ? sysfs_remove_group+0x170/0x170 [ 3309.078795] ? blk_queue_flag_set+0x22/0x30 [ 3309.079778] ? __loop_update_dio+0x2d2/0x690 [ 3309.080771] loop_configure+0x953/0x1410 [ 3309.081692] lo_ioctl+0xa57/0x16b0 [ 3309.082498] ? avc_has_extended_perms+0x7f1/0xf40 [ 3309.083582] ? loop_set_status_old+0x250/0x250 [ 3309.084615] ? avc_ss_reset+0x180/0x180 [ 3309.085525] ? find_held_lock+0x2c/0x110 [ 3309.086450] ? __lock_acquire+0xbb1/0x5b00 [ 3309.087460] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3309.088638] ? generic_block_fiemap+0x60/0x60 [ 3309.089645] ? lock_downgrade+0x6d0/0x6d0 [ 3309.090574] ? build_open_flags+0x6f0/0x6f0 [ 3309.091560] ? loop_set_status_old+0x250/0x250 [ 3309.092586] blkdev_ioctl+0x291/0x710 [ 3309.093450] ? blkdev_common_ioctl+0x1930/0x1930 [ 3309.094523] ? selinux_file_ioctl+0xb6/0x270 [ 3309.095520] block_ioctl+0xf9/0x140 [ 3309.096334] ? blkdev_read_iter+0x1c0/0x1c0 [ 3309.097302] __x64_sys_ioctl+0x19a/0x210 [ 3309.098219] do_syscall_64+0x33/0x40 [ 3309.099062] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3309.100226] RIP: 0033:0x7fcd90ea58d7 [ 3309.101065] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3309.105198] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3309.106948] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3309.108560] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3309.110178] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3309.111806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3309.113414] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:32:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x35, 0x0, &(0x7f0000000c80)) 17:32:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1900) 17:32:29 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 64) 17:32:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1e00) [ 3309.124198] loop5: detected capacity change from 0 to 2048 [ 3309.136735] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3309.149508] 9pnet: Insufficient options for proto=fd [ 3309.175557] 9pnet: Insufficient options for proto=fd [ 3309.197190] FAULT_INJECTION: forcing a failure. [ 3309.197190] name failslab, interval 1, probability 0, space 0, times 0 [ 3309.200161] CPU: 1 PID: 16042 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3309.201841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3309.203984] Call Trace: [ 3309.204685] dump_stack+0x107/0x167 [ 3309.205614] should_fail.cold+0x5/0xa [ 3309.206523] ? xas_alloc+0x336/0x440 [ 3309.207375] should_failslab+0x5/0x20 [ 3309.208355] kmem_cache_alloc+0x5b/0x310 [ 3309.209405] xas_alloc+0x336/0x440 [ 3309.210338] xas_create+0x34a/0x10d0 [ 3309.211311] ? kernel_text_address+0xf2/0x120 [ 3309.212452] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3309.213803] xas_store+0x8c/0x1c40 [ 3309.214712] __xa_store+0x164/0x2d0 [ 3309.215596] ? xa_delete_node+0x280/0x280 [ 3309.216742] ? trace_hardirqs_on+0x5b/0x180 [ 3309.217819] xa_store+0x31/0x50 [ 3309.218701] __io_uring_add_tctx_node+0x1cf/0x520 [ 3309.219922] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3309.221263] ? alloc_fd+0x2e7/0x670 [ 3309.222154] io_uring_setup+0x1fbb/0x2980 [ 3309.223236] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3309.224513] ? wait_for_completion_io+0x270/0x270 [ 3309.225823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3309.227196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3309.228355] do_syscall_64+0x33/0x40 [ 3309.229370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3309.230684] RIP: 0033:0x7f15cb12cb19 [ 3309.231624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3309.236380] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3309.238298] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3309.240109] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3309.241881] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3309.243711] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3309.245551] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:32:30 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x3c4, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:32:30 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x4018233a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:32:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 32) 17:32:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x36, 0x0, &(0x7f0000000c80)) 17:32:46 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x3c8, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:32:46 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x4018233e, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:32:46 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 65) 17:32:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1f00) 17:32:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1a00) 17:32:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006c6e742f656e637279707465014e360e241f5b645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 3325.774368] FAULT_INJECTION: forcing a failure. [ 3325.774368] name failslab, interval 1, probability 0, space 0, times 0 [ 3325.776777] FAULT_INJECTION: forcing a failure. [ 3325.776777] name failslab, interval 1, probability 0, space 0, times 0 [ 3325.776799] CPU: 0 PID: 16070 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3325.776808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3325.776815] Call Trace: [ 3325.776840] dump_stack+0x107/0x167 [ 3325.776866] should_fail.cold+0x5/0xa [ 3325.784435] ? ___slab_alloc+0x155/0x700 [ 3325.785283] ? create_object.isra.0+0x3a/0xa30 [ 3325.786240] should_failslab+0x5/0x20 [ 3325.787038] kmem_cache_alloc+0x5b/0x310 [ 3325.787910] create_object.isra.0+0x3a/0xa30 [ 3325.788817] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3325.789887] kmem_cache_alloc+0x159/0x310 [ 3325.790754] xas_alloc+0x336/0x440 [ 3325.791502] xas_create+0x34a/0x10d0 [ 3325.792280] ? kernel_text_address+0xf2/0x120 [ 3325.793212] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3325.794308] xas_store+0x8c/0x1c40 [ 3325.795062] __xa_store+0x164/0x2d0 [ 3325.795829] ? xa_delete_node+0x280/0x280 [ 3325.796693] ? trace_hardirqs_on+0x5b/0x180 [ 3325.797612] xa_store+0x31/0x50 [ 3325.798305] __io_uring_add_tctx_node+0x1cf/0x520 [ 3325.799335] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3325.800421] ? alloc_fd+0x2e7/0x670 [ 3325.801191] io_uring_setup+0x1fbb/0x2980 [ 3325.802058] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3325.803118] ? wait_for_completion_io+0x270/0x270 [ 3325.804145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3325.805236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3325.806308] do_syscall_64+0x33/0x40 [ 3325.807079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3325.808158] RIP: 0033:0x7f15cb12cb19 [ 3325.808942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3325.812803] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3325.814396] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3325.815903] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3325.817399] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3325.818898] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3325.820419] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3325.821948] CPU: 1 PID: 16060 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3325.823440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3325.825196] Call Trace: [ 3325.825764] dump_stack+0x107/0x167 [ 3325.826537] should_fail.cold+0x5/0xa [ 3325.827366] ? create_object.isra.0+0x3a/0xa30 [ 3325.828339] should_failslab+0x5/0x20 [ 3325.829148] kmem_cache_alloc+0x5b/0x310 [ 3325.830019] create_object.isra.0+0x3a/0xa30 [ 3325.830949] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3325.832037] kmem_cache_alloc+0x159/0x310 [ 3325.832921] __kernfs_new_node+0xd4/0x860 [ 3325.833814] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3325.834814] ? kernfs_add_one+0x36e/0x4d0 [ 3325.835718] ? mutex_lock_io_nested+0xf30/0xf30 [ 3325.836711] ? lock_acquire+0x197/0x470 [ 3325.837549] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3325.838578] kernfs_new_node+0x18d/0x250 [ 3325.839457] __kernfs_create_file+0x51/0x350 [ 3325.840400] sysfs_add_file_mode_ns+0x221/0x560 [ 3325.841399] internal_create_group+0x324/0xba0 [ 3325.842375] ? sysfs_remove_group+0x170/0x170 [ 3325.843343] ? lockdep_init_map_type+0x2c7/0x780 [ 3325.844356] ? blk_queue_flag_set+0x22/0x30 [ 3325.845286] ? __loop_update_dio+0x2d2/0x690 [ 3325.846240] loop_configure+0x953/0x1410 [ 3325.847130] lo_ioctl+0xa57/0x16b0 [ 3325.847893] ? avc_has_extended_perms+0x7f1/0xf40 [ 3325.848922] ? loop_set_status_old+0x250/0x250 [ 3325.849897] ? avc_ss_reset+0x180/0x180 [ 3325.850744] ? find_held_lock+0x2c/0x110 [ 3325.851633] ? __lock_acquire+0xbb1/0x5b00 [ 3325.852577] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3325.853698] ? generic_block_fiemap+0x60/0x60 [ 3325.854635] ? lock_downgrade+0x6d0/0x6d0 [ 3325.855525] ? build_open_flags+0x6f0/0x6f0 [ 3325.856452] ? loop_set_status_old+0x250/0x250 [ 3325.857419] blkdev_ioctl+0x291/0x710 [ 3325.858230] ? blkdev_common_ioctl+0x1930/0x1930 [ 3325.859294] ? selinux_file_ioctl+0xb6/0x270 [ 3325.860244] block_ioctl+0xf9/0x140 [ 3325.861055] ? blkdev_read_iter+0x1c0/0x1c0 [ 3325.861992] __x64_sys_ioctl+0x19a/0x210 [ 3325.862871] do_syscall_64+0x33/0x40 [ 3325.863695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3325.864797] RIP: 0033:0x7fcd90ea58d7 [ 3325.865589] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3325.869494] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3325.871130] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3325.872643] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3325.874153] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3325.875676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3325.877190] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:32:46 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 66) [ 3325.900576] loop5: detected capacity change from 0 to 2048 [ 3325.955609] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3325.969282] FAULT_INJECTION: forcing a failure. [ 3325.969282] name failslab, interval 1, probability 0, space 0, times 0 [ 3325.972391] CPU: 1 PID: 16079 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3325.973875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3325.975619] Call Trace: [ 3325.976183] dump_stack+0x107/0x167 [ 3325.976952] should_fail.cold+0x5/0xa [ 3325.977751] ? xas_alloc+0x336/0x440 [ 3325.978536] should_failslab+0x5/0x20 [ 3325.979344] kmem_cache_alloc+0x5b/0x310 [ 3325.980201] xas_alloc+0x336/0x440 [ 3325.980952] xas_create+0x34a/0x10d0 [ 3325.981739] ? kernel_text_address+0xf2/0x120 [ 3325.982680] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3325.983786] xas_store+0x8c/0x1c40 [ 3325.984545] __xa_store+0x164/0x2d0 [ 3325.985310] ? xa_delete_node+0x280/0x280 [ 3325.986180] ? trace_hardirqs_on+0x5b/0x180 [ 3325.987094] xa_store+0x31/0x50 [ 3325.987821] __io_uring_add_tctx_node+0x1cf/0x520 [ 3325.988842] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3325.989951] ? alloc_fd+0x2e7/0x670 [ 3325.990722] io_uring_setup+0x1fbb/0x2980 [ 3325.991614] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3325.992692] ? wait_for_completion_io+0x270/0x270 [ 3325.993727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3325.994839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3325.995935] do_syscall_64+0x33/0x40 [ 3325.996723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3325.997799] RIP: 0033:0x7f15cb12cb19 [ 3325.998582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3326.002451] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3326.004052] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3326.005555] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3326.007049] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3326.008557] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3326.010063] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:32:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x37, 0x0, &(0x7f0000000c80)) [ 3326.040899] 9pnet: Insufficient options for proto=fd 17:32:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 33) [ 3326.121298] 9pnet: Insufficient options for proto=fd [ 3326.212283] FAULT_INJECTION: forcing a failure. [ 3326.212283] name failslab, interval 1, probability 0, space 0, times 0 [ 3326.214781] CPU: 1 PID: 16089 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3326.216238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3326.217970] Call Trace: [ 3326.218528] dump_stack+0x107/0x167 [ 3326.219311] should_fail.cold+0x5/0xa [ 3326.220115] ? __kernfs_new_node+0xd4/0x860 [ 3326.221018] should_failslab+0x5/0x20 [ 3326.221818] kmem_cache_alloc+0x5b/0x310 [ 3326.222670] __kernfs_new_node+0xd4/0x860 [ 3326.223553] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3326.224535] ? kernfs_add_one+0x36e/0x4d0 [ 3326.225408] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3326.226418] ? wait_for_completion_io+0x270/0x270 [ 3326.227430] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3326.228529] kernfs_new_node+0x18d/0x250 [ 3326.229388] __kernfs_create_file+0x51/0x350 [ 3326.230312] sysfs_add_file_mode_ns+0x221/0x560 [ 3326.231308] internal_create_group+0x324/0xba0 [ 3326.232268] ? sysfs_remove_group+0x170/0x170 [ 3326.233212] ? lockdep_init_map_type+0x2c7/0x780 [ 3326.234208] ? blk_queue_flag_set+0x22/0x30 [ 3326.235122] ? __loop_update_dio+0x2d2/0x690 [ 3326.236051] loop_configure+0x953/0x1410 [ 3326.236912] lo_ioctl+0xa57/0x16b0 [ 3326.237658] ? avc_has_extended_perms+0x7f1/0xf40 [ 3326.238667] ? loop_set_status_old+0x250/0x250 [ 3326.239634] ? avc_ss_reset+0x180/0x180 [ 3326.240482] ? find_held_lock+0x2c/0x110 [ 3326.241350] ? __lock_acquire+0xbb1/0x5b00 [ 3326.242276] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3326.243382] ? generic_block_fiemap+0x60/0x60 [ 3326.244317] ? lock_downgrade+0x6d0/0x6d0 [ 3326.245186] ? build_open_flags+0x6f0/0x6f0 [ 3326.246093] ? loop_set_status_old+0x250/0x250 [ 3326.247045] blkdev_ioctl+0x291/0x710 [ 3326.247849] ? blkdev_common_ioctl+0x1930/0x1930 [ 3326.248841] ? selinux_file_ioctl+0xb6/0x270 [ 3326.249772] block_ioctl+0xf9/0x140 [ 3326.250532] ? blkdev_read_iter+0x1c0/0x1c0 [ 3326.251454] __x64_sys_ioctl+0x19a/0x210 [ 3326.252308] do_syscall_64+0x33/0x40 [ 3326.253099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3326.254171] RIP: 0033:0x7fcd90ea58d7 [ 3326.254959] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3326.258818] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3326.260419] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3326.261912] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3326.263409] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3326.264904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3326.266395] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3326.332794] loop5: detected capacity change from 0 to 2048 [ 3326.353263] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:02 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 67) 17:33:02 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182342, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 34) 17:33:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1b00) 17:33:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0xca39, 0x2, 0x0, 0x80000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) umount2(&(0x7f0000000680)='mnt/encrypted_dir/file0\x00', 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:33:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x38, 0x0, &(0x7f0000000c80)) 17:33:02 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x3e9, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x2000) [ 3341.586147] FAULT_INJECTION: forcing a failure. [ 3341.586147] name failslab, interval 1, probability 0, space 0, times 0 [ 3341.587828] CPU: 1 PID: 16106 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3341.588825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3341.590110] Call Trace: [ 3341.590610] dump_stack+0x107/0x167 [ 3341.591129] should_fail.cold+0x5/0xa [ 3341.591694] ? create_object.isra.0+0x3a/0xa30 [ 3341.592350] should_failslab+0x5/0x20 [ 3341.592896] kmem_cache_alloc+0x5b/0x310 [ 3341.593478] ? mark_held_locks+0x9e/0xe0 [ 3341.594066] create_object.isra.0+0x3a/0xa30 [ 3341.594682] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3341.595419] kmem_cache_alloc+0x159/0x310 [ 3341.596018] xas_alloc+0x336/0x440 [ 3341.596572] xas_create+0x34a/0x10d0 [ 3341.597228] ? kernel_text_address+0xf2/0x120 [ 3341.597897] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3341.598946] xas_store+0x8c/0x1c40 [ 3341.599359] FAULT_INJECTION: forcing a failure. [ 3341.599359] name failslab, interval 1, probability 0, space 0, times 0 [ 3341.599487] __xa_store+0x164/0x2d0 [ 3341.599510] ? xa_delete_node+0x280/0x280 [ 3341.602924] ? trace_hardirqs_on+0x5b/0x180 [ 3341.603592] xa_store+0x31/0x50 [ 3341.604067] __io_uring_add_tctx_node+0x1cf/0x520 [ 3341.604755] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3341.605519] ? alloc_fd+0x2e7/0x670 [ 3341.606045] io_uring_setup+0x1fbb/0x2980 [ 3341.606639] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3341.607379] ? wait_for_completion_io+0x270/0x270 [ 3341.608085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3341.608837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3341.609588] do_syscall_64+0x33/0x40 [ 3341.610134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3341.610867] RIP: 0033:0x7f15cb12cb19 [ 3341.611410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3341.614044] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3341.615143] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3341.616167] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3341.617194] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3341.618204] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3341.619210] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3341.620256] CPU: 0 PID: 16101 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3341.621711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3341.623457] Call Trace: [ 3341.624019] dump_stack+0x107/0x167 [ 3341.624784] should_fail.cold+0x5/0xa [ 3341.625594] ? create_object.isra.0+0x3a/0xa30 [ 3341.626546] should_failslab+0x5/0x20 [ 3341.627352] kmem_cache_alloc+0x5b/0x310 [ 3341.628204] create_object.isra.0+0x3a/0xa30 [ 3341.629118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3341.630190] kmem_cache_alloc+0x159/0x310 [ 3341.630214] __kernfs_new_node+0xd4/0x860 [ 3341.630236] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3341.630250] ? kernfs_add_one+0x36e/0x4d0 [ 3341.630274] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3341.630295] ? wait_for_completion_io+0x270/0x270 [ 3341.630314] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3341.630338] kernfs_new_node+0x18d/0x250 [ 3341.630361] __kernfs_create_file+0x51/0x350 [ 3341.630384] sysfs_add_file_mode_ns+0x221/0x560 [ 3341.630413] internal_create_group+0x324/0xba0 [ 3341.630440] ? sysfs_remove_group+0x170/0x170 [ 3341.630464] ? lockdep_init_map_type+0x2c7/0x780 [ 3341.630484] ? blk_queue_flag_set+0x22/0x30 [ 3341.630502] ? __loop_update_dio+0x2d2/0x690 [ 3341.630526] loop_configure+0x953/0x1410 [ 3341.630556] lo_ioctl+0xa57/0x16b0 [ 3341.630578] ? avc_has_extended_perms+0x7f1/0xf40 [ 3341.630601] ? loop_set_status_old+0x250/0x250 [ 3341.630623] ? avc_ss_reset+0x180/0x180 [ 3341.630644] ? find_held_lock+0x2c/0x110 [ 3341.630674] ? __lock_acquire+0xbb1/0x5b00 [ 3341.630736] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3341.630755] ? generic_block_fiemap+0x60/0x60 [ 3341.630773] ? lock_downgrade+0x6d0/0x6d0 [ 3341.630791] ? build_open_flags+0x6f0/0x6f0 [ 3341.630816] ? loop_set_status_old+0x250/0x250 [ 3341.630832] blkdev_ioctl+0x291/0x710 [ 3341.630852] ? blkdev_common_ioctl+0x1930/0x1930 [ 3341.630875] ? selinux_file_ioctl+0xb6/0x270 [ 3341.630898] block_ioctl+0xf9/0x140 [ 3341.630914] ? blkdev_read_iter+0x1c0/0x1c0 [ 3341.630934] __x64_sys_ioctl+0x19a/0x210 [ 3341.630957] do_syscall_64+0x33/0x40 [ 3341.630976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3341.630989] RIP: 0033:0x7fcd90ea58d7 [ 3341.631012] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3341.651712] 9pnet: Insufficient options for proto=fd [ 3341.652622] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3341.652643] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3341.652654] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3341.652665] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3341.652676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3341.652687] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3341.653443] loop5: detected capacity change from 0 to 2048 [ 3341.663381] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 35) [ 3341.767587] 9pnet: Insufficient options for proto=fd 17:33:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x39, 0x0, &(0x7f0000000c80)) [ 3341.826602] FAULT_INJECTION: forcing a failure. [ 3341.826602] name failslab, interval 1, probability 0, space 0, times 0 [ 3341.829181] CPU: 0 PID: 16124 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3341.830730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3341.832524] Call Trace: [ 3341.833086] dump_stack+0x107/0x167 [ 3341.833870] should_fail.cold+0x5/0xa [ 3341.834689] ? __kernfs_new_node+0xd4/0x860 [ 3341.835624] should_failslab+0x5/0x20 [ 3341.836442] kmem_cache_alloc+0x5b/0x310 [ 3341.837313] __kernfs_new_node+0xd4/0x860 [ 3341.838202] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3341.839210] ? kernfs_add_one+0x36e/0x4d0 [ 3341.840115] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3341.841153] ? wait_for_completion_io+0x270/0x270 [ 3341.842189] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3341.843331] kernfs_new_node+0x18d/0x250 [ 3341.844215] __kernfs_create_file+0x51/0x350 [ 3341.845166] sysfs_add_file_mode_ns+0x221/0x560 [ 3341.846178] internal_create_group+0x324/0xba0 [ 3341.847166] ? sysfs_remove_group+0x170/0x170 [ 3341.848148] ? lockdep_init_map_type+0x2c7/0x780 [ 3341.849166] ? blk_queue_flag_set+0x22/0x30 [ 3341.850092] ? __loop_update_dio+0x2d2/0x690 [ 3341.851045] loop_configure+0x953/0x1410 [ 3341.851950] lo_ioctl+0xa57/0x16b0 [ 3341.852717] ? avc_has_extended_perms+0x7f1/0xf40 [ 3341.853757] ? loop_set_status_old+0x250/0x250 [ 3341.854742] ? avc_ss_reset+0x180/0x180 [ 3341.855604] ? find_held_lock+0x2c/0x110 [ 3341.856489] ? __lock_acquire+0xbb1/0x5b00 [ 3341.857440] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3341.858566] ? generic_block_fiemap+0x60/0x60 [ 3341.859535] ? lock_downgrade+0x6d0/0x6d0 [ 3341.860427] ? build_open_flags+0x6f0/0x6f0 [ 3341.861357] ? loop_set_status_old+0x250/0x250 [ 3341.862332] blkdev_ioctl+0x291/0x710 [ 3341.863155] ? blkdev_common_ioctl+0x1930/0x1930 [ 3341.864184] ? selinux_file_ioctl+0xb6/0x270 [ 3341.865137] block_ioctl+0xf9/0x140 [ 3341.865916] ? blkdev_read_iter+0x1c0/0x1c0 [ 3341.866843] __x64_sys_ioctl+0x19a/0x210 [ 3341.867728] do_syscall_64+0x33/0x40 17:33:02 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 68) [ 3341.868534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 17:33:02 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000680)=""/132, 0x84) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x1}}, 'mnt/encrypted_dir\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) [ 3341.869790] RIP: 0033:0x7fcd90ea58d7 [ 3341.870684] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3341.874656] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3341.876301] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3341.877833] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3341.879378] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3341.880916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3341.882457] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3341.887554] loop5: detected capacity change from 0 to 2048 [ 3341.893937] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3341.923684] FAULT_INJECTION: forcing a failure. [ 3341.923684] name failslab, interval 1, probability 0, space 0, times 0 [ 3341.926247] CPU: 0 PID: 16129 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3341.927889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3341.929681] Call Trace: [ 3341.930253] dump_stack+0x107/0x167 [ 3341.931039] should_fail.cold+0x5/0xa [ 3341.931870] ? xas_alloc+0x336/0x440 [ 3341.932671] should_failslab+0x5/0x20 [ 3341.933491] kmem_cache_alloc+0x5b/0x310 [ 3341.934373] xas_alloc+0x336/0x440 [ 3341.935140] xas_create+0x34a/0x10d0 [ 3341.935961] ? kernel_text_address+0xf2/0x120 [ 3341.936930] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3341.938062] xas_store+0x8c/0x1c40 [ 3341.938841] __xa_store+0x164/0x2d0 [ 3341.939647] ? xa_delete_node+0x280/0x280 [ 3341.940546] ? trace_hardirqs_on+0x5b/0x180 [ 3341.941480] xa_store+0x31/0x50 [ 3341.942194] __io_uring_add_tctx_node+0x1cf/0x520 [ 3341.943234] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3341.944367] ? alloc_fd+0x2e7/0x670 [ 3341.945162] io_uring_setup+0x1fbb/0x2980 [ 3341.946062] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3341.947154] ? wait_for_completion_io+0x270/0x270 [ 3341.948220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3341.949353] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3341.950465] do_syscall_64+0x33/0x40 [ 3341.951267] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3341.952377] RIP: 0033:0x7f15cb12cb19 [ 3341.953180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3341.957156] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3341.958797] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3341.960338] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3341.961876] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3341.963418] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3341.964952] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:33:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3a, 0x0, &(0x7f0000000c80)) 17:33:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x2300) [ 3342.019260] 9pnet: Insufficient options for proto=fd 17:33:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 36) 17:33:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1c00) [ 3342.057511] 9pnet: Insufficient options for proto=fd [ 3342.058566] FAULT_INJECTION: forcing a failure. [ 3342.058566] name failslab, interval 1, probability 0, space 0, times 0 [ 3342.060223] CPU: 1 PID: 16140 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3342.061071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3342.062089] Call Trace: [ 3342.062405] dump_stack+0x107/0x167 [ 3342.062854] should_fail.cold+0x5/0xa [ 3342.063312] ? create_object.isra.0+0x3a/0xa30 [ 3342.063876] should_failslab+0x5/0x20 [ 3342.064339] kmem_cache_alloc+0x5b/0x310 [ 3342.064813] create_object.isra.0+0x3a/0xa30 [ 3342.065357] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3342.065939] kmem_cache_alloc+0x159/0x310 [ 3342.066450] __kernfs_new_node+0xd4/0x860 [ 3342.066962] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3342.067553] ? kernfs_add_one+0x36e/0x4d0 [ 3342.068031] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3342.068620] ? wait_for_completion_io+0x270/0x270 [ 3342.069202] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3342.069834] kernfs_new_node+0x18d/0x250 [ 3342.070328] __kernfs_create_file+0x51/0x350 [ 3342.070859] sysfs_add_file_mode_ns+0x221/0x560 [ 3342.071447] internal_create_group+0x324/0xba0 [ 3342.072000] ? sysfs_remove_group+0x170/0x170 [ 3342.072548] ? lockdep_init_map_type+0x2c7/0x780 [ 3342.073118] ? blk_queue_flag_set+0x22/0x30 [ 3342.073643] ? __loop_update_dio+0x2d2/0x690 [ 3342.074177] loop_configure+0x953/0x1410 [ 3342.074676] lo_ioctl+0xa57/0x16b0 [ 3342.075108] ? avc_has_extended_perms+0x7f1/0xf40 [ 3342.075706] ? loop_set_status_old+0x250/0x250 [ 3342.076261] ? avc_ss_reset+0x180/0x180 [ 3342.076718] ? quarantine_put+0x13f/0x1a0 [ 3342.077217] ? lock_downgrade+0x6d0/0x6d0 [ 3342.077714] ? __lock_acquire+0xbb1/0x5b00 [ 3342.078235] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3342.078850] ? generic_block_fiemap+0x60/0x60 [ 3342.079376] ? lock_downgrade+0x6d0/0x6d0 [ 3342.079857] ? build_open_flags+0x6f0/0x6f0 [ 3342.080351] ? loop_set_status_old+0x250/0x250 [ 3342.080869] blkdev_ioctl+0x291/0x710 [ 3342.081302] ? blkdev_common_ioctl+0x1930/0x1930 [ 3342.081842] ? selinux_file_ioctl+0xb6/0x270 [ 3342.082340] block_ioctl+0xf9/0x140 [ 3342.082749] ? blkdev_read_iter+0x1c0/0x1c0 [ 3342.083243] __x64_sys_ioctl+0x19a/0x210 [ 3342.083708] do_syscall_64+0x33/0x40 [ 3342.084145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3342.084722] RIP: 0033:0x7fcd90ea58d7 [ 3342.085146] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3342.087221] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3342.088088] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3342.088891] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3342.089691] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3342.090494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3342.091299] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3342.093991] loop5: detected capacity change from 0 to 2048 [ 3342.132206] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) r3 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r9 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) 17:33:02 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x3ed, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3b, 0x0, &(0x7f0000000c80)) 17:33:03 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 69) 17:33:03 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182348, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3342.288150] FAULT_INJECTION: forcing a failure. [ 3342.288150] name failslab, interval 1, probability 0, space 0, times 0 [ 3342.290691] CPU: 0 PID: 16157 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3342.292202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3342.293924] Call Trace: [ 3342.294481] dump_stack+0x107/0x167 17:33:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 37) [ 3342.295249] should_fail.cold+0x5/0xa [ 3342.296133] ? create_object.isra.0+0x3a/0xa30 [ 3342.297093] should_failslab+0x5/0x20 [ 3342.297900] kmem_cache_alloc+0x5b/0x310 [ 3342.298760] ? mark_held_locks+0x9e/0xe0 [ 3342.299635] create_object.isra.0+0x3a/0xa30 [ 3342.300564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3342.301654] kmem_cache_alloc+0x159/0x310 [ 3342.302538] xas_alloc+0x336/0x440 [ 3342.303305] xas_create+0x34a/0x10d0 [ 3342.304101] ? kernel_text_address+0xf2/0x120 [ 3342.305054] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3342.306283] xas_store+0x8c/0x1c40 [ 3342.307192] __xa_store+0x164/0x2d0 [ 3342.308118] ? xa_delete_node+0x280/0x280 [ 3342.309171] ? trace_hardirqs_on+0x5b/0x180 [ 3342.310265] xa_store+0x31/0x50 [ 3342.311102] __io_uring_add_tctx_node+0x1cf/0x520 [ 3342.312319] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3342.313637] ? alloc_fd+0x2e7/0x670 [ 3342.314562] io_uring_setup+0x1fbb/0x2980 [ 3342.315631] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3342.316910] ? wait_for_completion_io+0x270/0x270 [ 3342.318150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3342.319486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3342.320794] do_syscall_64+0x33/0x40 [ 3342.321730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3342.323023] RIP: 0033:0x7f15cb12cb19 [ 3342.323968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3342.328589] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3342.330500] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3342.332293] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3342.334084] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3342.335878] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3342.337671] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3342.363241] 9pnet: Insufficient options for proto=fd [ 3342.379271] FAULT_INJECTION: forcing a failure. [ 3342.379271] name failslab, interval 1, probability 0, space 0, times 0 [ 3342.380731] CPU: 1 PID: 16166 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3342.381539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3342.382481] Call Trace: [ 3342.382796] dump_stack+0x107/0x167 [ 3342.383220] should_fail.cold+0x5/0xa [ 3342.383673] ? __kernfs_new_node+0xd4/0x860 [ 3342.384174] should_failslab+0x5/0x20 [ 3342.384615] kmem_cache_alloc+0x5b/0x310 [ 3342.385084] __kernfs_new_node+0xd4/0x860 [ 3342.385564] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3342.386098] ? kernfs_add_one+0x36e/0x4d0 [ 3342.386590] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3342.387149] ? wait_for_completion_io+0x270/0x270 [ 3342.387713] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3342.388325] kernfs_new_node+0x18d/0x250 [ 3342.388795] __kernfs_create_file+0x51/0x350 [ 3342.389316] sysfs_add_file_mode_ns+0x221/0x560 [ 3342.389842] internal_create_group+0x324/0xba0 [ 3342.390359] ? sysfs_remove_group+0x170/0x170 [ 3342.390870] ? lockdep_init_map_type+0x2c7/0x780 [ 3342.391419] ? blk_queue_flag_set+0x22/0x30 [ 3342.391914] ? __loop_update_dio+0x2d2/0x690 [ 3342.392415] loop_configure+0x953/0x1410 [ 3342.392883] lo_ioctl+0xa57/0x16b0 [ 3342.393284] ? avc_has_extended_perms+0x7f1/0xf40 [ 3342.393822] ? loop_set_status_old+0x250/0x250 [ 3342.394339] ? avc_ss_reset+0x180/0x180 [ 3342.394785] ? find_held_lock+0x2c/0x110 [ 3342.395264] ? __lock_acquire+0xbb1/0x5b00 [ 3342.395769] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3342.396366] ? generic_block_fiemap+0x60/0x60 [ 3342.396866] ? lock_downgrade+0x6d0/0x6d0 [ 3342.397330] ? build_open_flags+0x6f0/0x6f0 [ 3342.397819] ? loop_set_status_old+0x250/0x250 [ 3342.398331] blkdev_ioctl+0x291/0x710 [ 3342.398773] ? blkdev_common_ioctl+0x1930/0x1930 [ 3342.399316] ? selinux_file_ioctl+0xb6/0x270 [ 3342.399832] block_ioctl+0xf9/0x140 [ 3342.400250] ? blkdev_read_iter+0x1c0/0x1c0 [ 3342.400741] __x64_sys_ioctl+0x19a/0x210 [ 3342.401216] do_syscall_64+0x33/0x40 [ 3342.401639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3342.402218] RIP: 0033:0x7fcd90ea58d7 [ 3342.402648] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3342.404737] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3342.405601] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3342.406403] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3342.407207] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3342.408025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3342.408826] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3342.409588] 9pnet: Insufficient options for proto=fd [ 3342.461793] loop5: detected capacity change from 0 to 2048 [ 3342.477388] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:18 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x4018234a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x3f00) 17:33:18 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x403, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3c, 0x0, &(0x7f0000000c80)) 17:33:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1d00) 17:33:18 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 70) 17:33:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xae\xb7\xfd{\xc8\x11vL\xc5'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) [ 3358.218579] FAULT_INJECTION: forcing a failure. [ 3358.218579] name failslab, interval 1, probability 0, space 0, times 0 [ 3358.221764] CPU: 1 PID: 16186 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3358.223682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3358.225958] Call Trace: [ 3358.226686] dump_stack+0x107/0x167 [ 3358.227710] should_fail.cold+0x5/0xa [ 3358.228757] ? xas_alloc+0x336/0x440 [ 3358.229770] should_failslab+0x5/0x20 [ 3358.230817] kmem_cache_alloc+0x5b/0x310 [ 3358.231935] xas_alloc+0x336/0x440 [ 3358.232908] xas_create+0x34a/0x10d0 [ 3358.233926] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 3358.235296] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3358.236734] xas_store+0x8c/0x1c40 [ 3358.237725] __xa_store+0x164/0x2d0 [ 3358.238716] ? xa_delete_node+0x280/0x280 [ 3358.239880] ? trace_hardirqs_on+0x5b/0x180 [ 3358.241080] xa_store+0x31/0x50 [ 3358.242005] __io_uring_add_tctx_node+0x1cf/0x520 [ 3358.243322] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3358.244771] ? alloc_fd+0x2e7/0x670 [ 3358.245775] io_uring_setup+0x1fbb/0x2980 [ 3358.246906] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3358.248268] ? wait_for_completion_io+0x270/0x270 [ 3358.249594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3358.251019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3358.252291] do_syscall_64+0x33/0x40 [ 3358.253114] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3358.254247] RIP: 0033:0x7f15cb12cb19 [ 3358.255074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3358.259132] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3358.260882] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3358.262882] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3358.264943] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3358.266985] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3358.268630] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3358.280436] FAULT_INJECTION: forcing a failure. [ 3358.280436] name failslab, interval 1, probability 0, space 0, times 0 17:33:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 38) 17:33:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3d, 0x0, &(0x7f0000000c80)) [ 3358.282580] CPU: 0 PID: 16193 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3358.284196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3358.285777] Call Trace: [ 3358.286259] dump_stack+0x107/0x167 [ 3358.286912] should_fail.cold+0x5/0xa [ 3358.287626] ? create_object.isra.0+0x3a/0xa30 [ 3358.288451] should_failslab+0x5/0x20 [ 3358.289117] kmem_cache_alloc+0x5b/0x310 [ 3358.289850] create_object.isra.0+0x3a/0xa30 [ 3358.290646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3358.291572] kmem_cache_alloc+0x159/0x310 [ 3358.292321] __kernfs_new_node+0xd4/0x860 [ 3358.293077] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3358.293915] ? kernfs_add_one+0x36e/0x4d0 [ 3358.294665] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3358.295543] ? wait_for_completion_io+0x270/0x270 [ 3358.296416] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3358.297361] kernfs_new_node+0x18d/0x250 [ 3358.298102] __kernfs_create_file+0x51/0x350 [ 3358.298914] sysfs_add_file_mode_ns+0x221/0x560 [ 3358.299762] internal_create_group+0x324/0xba0 [ 3358.300598] ? sysfs_remove_group+0x170/0x170 [ 3358.301420] ? lockdep_init_map_type+0x2c7/0x780 [ 3358.302281] ? blk_queue_flag_set+0x22/0x30 [ 3358.303065] ? __loop_update_dio+0x2d2/0x690 [ 3358.303884] loop_configure+0x953/0x1410 [ 3358.304635] lo_ioctl+0xa57/0x16b0 [ 3358.305286] ? avc_has_extended_perms+0x7f1/0xf40 [ 3358.306165] ? loop_set_status_old+0x250/0x250 [ 3358.307000] ? avc_ss_reset+0x180/0x180 [ 3358.307728] ? find_held_lock+0x2c/0x110 [ 3358.308482] ? __lock_acquire+0xbb1/0x5b00 [ 3358.309288] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3358.310241] ? generic_block_fiemap+0x60/0x60 [ 3358.311053] ? lock_downgrade+0x6d0/0x6d0 [ 3358.311816] ? build_open_flags+0x6f0/0x6f0 [ 3358.312609] ? loop_set_status_old+0x250/0x250 [ 3358.313438] blkdev_ioctl+0x291/0x710 [ 3358.314128] ? blkdev_common_ioctl+0x1930/0x1930 [ 3358.314996] ? selinux_file_ioctl+0xb6/0x270 [ 3358.315812] block_ioctl+0xf9/0x140 [ 3358.316472] ? blkdev_read_iter+0x1c0/0x1c0 [ 3358.317256] __x64_sys_ioctl+0x19a/0x210 [ 3358.318002] do_syscall_64+0x33/0x40 [ 3358.318674] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3358.319599] RIP: 0033:0x7fcd90ea58d7 [ 3358.320254] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3358.323522] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3358.323708] 9pnet: Insufficient options for proto=fd [ 3358.324885] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3358.324895] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3358.324904] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3358.324913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3358.324922] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3358.325888] loop5: detected capacity change from 0 to 2048 [ 3358.353185] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4000) 17:33:19 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 71) [ 3358.441497] 9pnet: Insufficient options for proto=fd [ 3358.553214] FAULT_INJECTION: forcing a failure. [ 3358.553214] name failslab, interval 1, probability 0, space 0, times 0 [ 3358.555997] CPU: 1 PID: 16208 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3358.557559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3358.559426] Call Trace: [ 3358.560035] dump_stack+0x107/0x167 [ 3358.560859] should_fail.cold+0x5/0xa [ 3358.561722] ? create_object.isra.0+0x3a/0xa30 [ 3358.562745] should_failslab+0x5/0x20 [ 3358.563621] kmem_cache_alloc+0x5b/0x310 [ 3358.564544] ? mark_held_locks+0x9e/0xe0 [ 3358.565447] create_object.isra.0+0x3a/0xa30 [ 3358.566427] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3358.567588] kmem_cache_alloc+0x159/0x310 [ 3358.568514] xas_alloc+0x336/0x440 [ 3358.569318] xas_create+0x34a/0x10d0 [ 3358.570161] ? kernel_text_address+0xf2/0x120 [ 3358.571168] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3358.572339] xas_store+0x8c/0x1c40 [ 3358.573157] __xa_store+0x164/0x2d0 [ 3358.573966] ? xa_delete_node+0x280/0x280 [ 3358.574906] ? trace_hardirqs_on+0x5b/0x180 [ 3358.575895] xa_store+0x31/0x50 [ 3358.576642] __io_uring_add_tctx_node+0x1cf/0x520 [ 3358.577722] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3358.578896] ? alloc_fd+0x2e7/0x670 [ 3358.579733] io_uring_setup+0x1fbb/0x2980 [ 3358.580672] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3358.581811] ? wait_for_completion_io+0x270/0x270 [ 3358.582922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3358.584106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3358.585269] do_syscall_64+0x33/0x40 [ 3358.586100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3358.587247] RIP: 0033:0x7f15cb12cb19 [ 3358.588093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3358.592214] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3358.593874] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3358.595451] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3358.597042] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3358.598640] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3358.600224] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:33:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 39) 17:33:34 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x408, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:34 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x4018234c, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1e00) 17:33:34 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 72) 17:33:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x50f5) 17:33:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x101, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:33:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3e, 0x0, &(0x7f0000000c80)) [ 3373.402733] FAULT_INJECTION: forcing a failure. [ 3373.402733] name failslab, interval 1, probability 0, space 0, times 0 [ 3373.404260] CPU: 1 PID: 16223 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3373.405128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3373.406171] Call Trace: [ 3373.406518] dump_stack+0x107/0x167 [ 3373.406979] should_fail.cold+0x5/0xa [ 3373.407458] ? xas_alloc+0x336/0x440 [ 3373.407936] should_failslab+0x5/0x20 [ 3373.408412] kmem_cache_alloc+0x5b/0x310 [ 3373.408925] xas_alloc+0x336/0x440 [ 3373.409376] xas_create+0x34a/0x10d0 [ 3373.409847] ? kernel_text_address+0xf2/0x120 [ 3373.410409] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3373.411068] xas_store+0x8c/0x1c40 [ 3373.411521] __xa_store+0x164/0x2d0 [ 3373.411985] ? xa_delete_node+0x280/0x280 [ 3373.412507] ? trace_hardirqs_on+0x5b/0x180 [ 3373.413047] xa_store+0x31/0x50 [ 3373.413464] __io_uring_add_tctx_node+0x1cf/0x520 [ 3373.414069] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3373.414721] ? alloc_fd+0x2e7/0x670 [ 3373.415185] io_uring_setup+0x1fbb/0x2980 [ 3373.415722] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3373.416357] ? wait_for_completion_io+0x270/0x270 [ 3373.416967] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3373.417628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3373.418272] do_syscall_64+0x33/0x40 [ 3373.418736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3373.419378] RIP: 0033:0x7f15cb12cb19 [ 3373.419854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3373.422125] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3373.423069] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3373.423661] FAULT_INJECTION: forcing a failure. [ 3373.423661] name failslab, interval 1, probability 0, space 0, times 0 [ 3373.423951] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3373.423965] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3373.428111] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3373.428998] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3373.429905] CPU: 0 PID: 16222 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3373.431401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3373.433209] Call Trace: [ 3373.433786] dump_stack+0x107/0x167 [ 3373.434581] should_fail.cold+0x5/0xa [ 3373.435407] ? __kernfs_new_node+0xd4/0x860 [ 3373.436346] should_failslab+0x5/0x20 [ 3373.437169] kmem_cache_alloc+0x5b/0x310 [ 3373.438048] __kernfs_new_node+0xd4/0x860 [ 3373.438955] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3373.439995] ? kernfs_add_one+0x36e/0x4d0 [ 3373.440897] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3373.441930] ? wait_for_completion_io+0x270/0x270 [ 3373.442952] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3373.444079] kernfs_new_node+0x18d/0x250 [ 3373.444958] __kernfs_create_file+0x51/0x350 [ 3373.445913] sysfs_add_file_mode_ns+0x221/0x560 [ 3373.446919] internal_create_group+0x324/0xba0 [ 3373.447914] ? sysfs_remove_group+0x170/0x170 [ 3373.448884] ? lockdep_init_map_type+0x2c7/0x780 [ 3373.449910] ? blk_queue_flag_set+0x22/0x30 [ 3373.450835] ? __loop_update_dio+0x2d2/0x690 [ 3373.451791] loop_configure+0x953/0x1410 [ 3373.452670] lo_ioctl+0xa57/0x16b0 [ 3373.453437] ? avc_has_extended_perms+0x7f1/0xf40 [ 3373.454479] ? loop_set_status_old+0x250/0x250 [ 3373.455469] ? avc_ss_reset+0x180/0x180 [ 3373.456328] ? find_held_lock+0x2c/0x110 [ 3373.457209] ? __lock_acquire+0xbb1/0x5b00 [ 3373.458140] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3373.459258] ? generic_block_fiemap+0x60/0x60 [ 3373.460226] ? lock_downgrade+0x6d0/0x6d0 [ 3373.461114] ? build_open_flags+0x6f0/0x6f0 [ 3373.462042] ? loop_set_status_old+0x250/0x250 [ 3373.463034] blkdev_ioctl+0x291/0x710 [ 3373.463879] ? blkdev_common_ioctl+0x1930/0x1930 [ 3373.464907] ? selinux_file_ioctl+0xb6/0x270 [ 3373.465876] block_ioctl+0xf9/0x140 [ 3373.466684] ? blkdev_read_iter+0x1c0/0x1c0 [ 3373.467631] __x64_sys_ioctl+0x19a/0x210 [ 3373.468543] do_syscall_64+0x33/0x40 [ 3373.469364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3373.470488] RIP: 0033:0x7fcd90ea58d7 [ 3373.471303] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3373.475355] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3373.477038] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3373.478608] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3373.480199] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3373.481788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3373.483370] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:33:34 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182360, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3373.512653] 9pnet: Insufficient options for proto=fd [ 3373.524358] loop5: detected capacity change from 0 to 2048 17:33:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x42, 0x0, &(0x7f0000000c80)) [ 3373.540243] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 40) 17:33:34 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 73) [ 3373.588125] 9pnet: Insufficient options for proto=fd 17:33:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x6000) [ 3373.637955] FAULT_INJECTION: forcing a failure. [ 3373.637955] name failslab, interval 1, probability 0, space 0, times 0 [ 3373.640680] CPU: 0 PID: 16249 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3373.642245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3373.643254] FAULT_INJECTION: forcing a failure. [ 3373.643254] name failslab, interval 1, probability 0, space 0, times 0 [ 3373.644126] Call Trace: [ 3373.644153] dump_stack+0x107/0x167 [ 3373.644178] should_fail.cold+0x5/0xa [ 3373.647786] ? xas_alloc+0x336/0x440 [ 3373.648629] should_failslab+0x5/0x20 [ 3373.649488] kmem_cache_alloc+0x5b/0x310 [ 3373.650413] xas_alloc+0x336/0x440 [ 3373.651219] xas_create+0x34a/0x10d0 [ 3373.652078] ? kernel_text_address+0xf2/0x120 [ 3373.653094] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3373.654277] xas_store+0x8c/0x1c40 [ 3373.655094] __xa_store+0x164/0x2d0 [ 3373.655927] ? xa_delete_node+0x280/0x280 [ 3373.656865] ? trace_hardirqs_on+0x5b/0x180 [ 3373.657845] xa_store+0x31/0x50 [ 3373.658592] __io_uring_add_tctx_node+0x1cf/0x520 [ 3373.659687] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3373.660867] ? alloc_fd+0x2e7/0x670 [ 3373.661698] io_uring_setup+0x1fbb/0x2980 [ 3373.662641] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3373.663794] ? wait_for_completion_io+0x270/0x270 [ 3373.664903] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3373.666086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3373.667250] do_syscall_64+0x33/0x40 [ 3373.668100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3373.669275] RIP: 0033:0x7f15cb12cb19 [ 3373.670115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3373.674371] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3373.676133] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3373.677773] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3373.679417] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3373.681090] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3373.682733] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3373.684415] CPU: 1 PID: 16247 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3373.685262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3373.686345] Call Trace: [ 3373.686748] dump_stack+0x107/0x167 [ 3373.687186] should_fail.cold+0x5/0xa [ 3373.687653] ? create_object.isra.0+0x3a/0xa30 [ 3373.688195] should_failslab+0x5/0x20 [ 3373.688642] kmem_cache_alloc+0x5b/0x310 [ 3373.689119] create_object.isra.0+0x3a/0xa30 [ 3373.689743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3373.690530] kmem_cache_alloc+0x159/0x310 [ 3373.691125] __kernfs_new_node+0xd4/0x860 [ 3373.691610] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3373.692175] ? kernfs_add_one+0x36e/0x4d0 [ 3373.692671] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3373.693230] ? wait_for_completion_io+0x270/0x270 [ 3373.693790] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3373.694400] kernfs_new_node+0x18d/0x250 [ 3373.694873] __kernfs_create_file+0x51/0x350 [ 3373.695385] sysfs_add_file_mode_ns+0x221/0x560 [ 3373.695934] internal_create_group+0x324/0xba0 [ 3373.696468] ? sysfs_remove_group+0x170/0x170 [ 3373.696990] ? lockdep_init_map_type+0x2c7/0x780 [ 3373.697548] ? blk_queue_flag_set+0x22/0x30 [ 3373.698064] ? __loop_update_dio+0x2d2/0x690 [ 3373.698572] loop_configure+0x953/0x1410 [ 3373.699047] lo_ioctl+0xa57/0x16b0 [ 3373.699465] ? avc_has_extended_perms+0x7f1/0xf40 [ 3373.700033] ? loop_set_status_old+0x250/0x250 [ 3373.700567] ? avc_ss_reset+0x180/0x180 [ 3373.701038] ? find_held_lock+0x2c/0x110 [ 3373.701514] ? __lock_acquire+0xbb1/0x5b00 [ 3373.702036] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3373.702646] ? generic_block_fiemap+0x60/0x60 [ 3373.703168] ? lock_downgrade+0x6d0/0x6d0 [ 3373.703691] ? build_open_flags+0x6f0/0x6f0 [ 3373.704199] ? loop_set_status_old+0x250/0x250 [ 3373.704733] blkdev_ioctl+0x291/0x710 [ 3373.705184] ? blkdev_common_ioctl+0x1930/0x1930 [ 3373.705736] ? selinux_file_ioctl+0xb6/0x270 [ 3373.706253] block_ioctl+0xf9/0x140 [ 3373.706677] ? blkdev_read_iter+0x1c0/0x1c0 [ 3373.707181] __x64_sys_ioctl+0x19a/0x210 [ 3373.707667] do_syscall_64+0x33/0x40 [ 3373.708106] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3373.708700] RIP: 0033:0x7fcd90ea58d7 [ 3373.709138] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3373.711256] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3373.712148] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3373.712977] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3373.713801] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3373.714628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3373.715452] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3373.725757] loop5: detected capacity change from 0 to 2048 [ 3373.747823] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000120011"], 0x1c}}, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) 17:33:34 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 74) 17:33:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x43, 0x0, &(0x7f0000000c80)) [ 3373.794447] FAULT_INJECTION: forcing a failure. [ 3373.794447] name failslab, interval 1, probability 0, space 0, times 0 [ 3373.796021] CPU: 1 PID: 16258 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3373.796809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3373.797894] Call Trace: [ 3373.798271] dump_stack+0x107/0x167 [ 3373.798853] should_fail.cold+0x5/0xa [ 3373.799290] ? xas_alloc+0x336/0x440 [ 3373.799726] should_failslab+0x5/0x20 [ 3373.800162] kmem_cache_alloc+0x5b/0x310 [ 3373.800624] xas_alloc+0x336/0x440 [ 3373.801034] xas_create+0x34a/0x10d0 [ 3373.801465] ? kernel_text_address+0xf2/0x120 [ 3373.801977] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3373.802569] xas_store+0x8c/0x1c40 [ 3373.802981] __xa_store+0x164/0x2d0 [ 3373.803394] ? xa_delete_node+0x280/0x280 [ 3373.803889] ? trace_hardirqs_on+0x5b/0x180 [ 3373.804381] xa_store+0x31/0x50 [ 3373.804758] __io_uring_add_tctx_node+0x1cf/0x520 [ 3373.805304] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3373.805898] ? alloc_fd+0x2e7/0x670 [ 3373.806316] io_uring_setup+0x1fbb/0x2980 [ 3373.806803] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3373.807378] ? wait_for_completion_io+0x270/0x270 [ 3373.807965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3373.808556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3373.809151] do_syscall_64+0x33/0x40 [ 3373.809570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3373.810150] RIP: 0033:0x7f15cb12cb19 [ 3373.810571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3373.812682] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3373.813544] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3373.814359] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3373.815177] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3373.816007] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3373.816823] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:33:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 41) 17:33:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x1f00) [ 3373.900975] 9pnet: Insufficient options for proto=fd [ 3373.929576] FAULT_INJECTION: forcing a failure. [ 3373.929576] name failslab, interval 1, probability 0, space 0, times 0 [ 3373.930979] CPU: 1 PID: 16265 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3373.931784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3373.932728] Call Trace: [ 3373.933034] dump_stack+0x107/0x167 [ 3373.933456] should_fail.cold+0x5/0xa [ 3373.933893] ? __kernfs_new_node+0xd4/0x860 [ 3373.934381] should_failslab+0x5/0x20 [ 3373.934816] kmem_cache_alloc+0x5b/0x310 [ 3373.935293] __kernfs_new_node+0xd4/0x860 [ 3373.935773] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3373.936316] ? kernfs_add_one+0x36e/0x4d0 [ 3373.936799] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3373.937352] ? wait_for_completion_io+0x270/0x270 [ 3373.937903] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3373.938515] kernfs_new_node+0x18d/0x250 [ 3373.938980] __kernfs_create_file+0x51/0x350 [ 3373.939484] sysfs_add_file_mode_ns+0x221/0x560 [ 3373.940027] internal_create_group+0x324/0xba0 [ 3373.940557] ? sysfs_remove_group+0x170/0x170 [ 3373.941074] ? lockdep_init_map_type+0x2c7/0x780 [ 3373.941616] ? blk_queue_flag_set+0x22/0x30 [ 3373.942112] ? __loop_update_dio+0x2d2/0x690 [ 3373.942623] loop_configure+0x953/0x1410 [ 3373.943093] lo_ioctl+0xa57/0x16b0 [ 3373.943504] ? avc_has_extended_perms+0x7f1/0xf40 [ 3373.944064] ? loop_set_status_old+0x250/0x250 [ 3373.944589] ? avc_ss_reset+0x180/0x180 [ 3373.945048] ? find_held_lock+0x2c/0x110 [ 3373.945523] ? __lock_acquire+0xbb1/0x5b00 [ 3373.946034] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3373.946634] ? generic_block_fiemap+0x60/0x60 [ 3373.947149] ? lock_downgrade+0x6d0/0x6d0 [ 3373.947621] ? build_open_flags+0x6f0/0x6f0 [ 3373.948119] ? loop_set_status_old+0x250/0x250 [ 3373.948638] blkdev_ioctl+0x291/0x710 [ 3373.949078] ? blkdev_common_ioctl+0x1930/0x1930 [ 3373.949624] ? selinux_file_ioctl+0xb6/0x270 [ 3373.950129] block_ioctl+0xf9/0x140 [ 3373.950543] ? blkdev_read_iter+0x1c0/0x1c0 [ 3373.951034] __x64_sys_ioctl+0x19a/0x210 [ 3373.951499] do_syscall_64+0x33/0x40 [ 3373.951938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3373.952529] RIP: 0033:0x7fcd90ea58d7 [ 3373.952958] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3373.955072] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3373.955947] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3373.956767] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3373.957592] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3373.958415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3373.959233] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:33:34 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 75) [ 3374.004811] loop5: detected capacity change from 0 to 2048 17:33:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x46, 0x0, &(0x7f0000000c80)) [ 3374.022692] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:34 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x500, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 42) [ 3374.069489] 9pnet: Insufficient options for proto=fd [ 3374.092355] FAULT_INJECTION: forcing a failure. [ 3374.092355] name failslab, interval 1, probability 0, space 0, times 0 [ 3374.095023] CPU: 0 PID: 16272 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3374.096624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3374.098533] Call Trace: [ 3374.099151] dump_stack+0x107/0x167 [ 3374.100004] should_fail.cold+0x5/0xa [ 3374.100889] ? create_object.isra.0+0x3a/0xa30 [ 3374.101949] should_failslab+0x5/0x20 [ 3374.102828] kmem_cache_alloc+0x5b/0x310 [ 3374.103776] ? mark_held_locks+0x9e/0xe0 [ 3374.104725] create_object.isra.0+0x3a/0xa30 [ 3374.105739] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3374.106924] kmem_cache_alloc+0x159/0x310 [ 3374.107903] xas_alloc+0x336/0x440 [ 3374.108702] xas_create+0x34a/0x10d0 [ 3374.109571] ? kernel_text_address+0xf2/0x120 [ 3374.110608] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3374.111797] xas_store+0x8c/0x1c40 [ 3374.112631] __xa_store+0x164/0x2d0 [ 3374.113458] ? xa_delete_node+0x280/0x280 [ 3374.114427] ? trace_hardirqs_on+0x5b/0x180 [ 3374.115430] xa_store+0x31/0x50 [ 3374.116214] __io_uring_add_tctx_node+0x1cf/0x520 [ 3374.117335] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3374.118485] ? alloc_fd+0x2e7/0x670 [ 3374.119339] io_uring_setup+0x1fbb/0x2980 [ 3374.120312] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3374.121480] ? wait_for_completion_io+0x270/0x270 [ 3374.122613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3374.123841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3374.125037] do_syscall_64+0x33/0x40 [ 3374.125899] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3374.127082] RIP: 0033:0x7f15cb12cb19 [ 3374.127948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3374.132207] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3374.133967] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3374.135603] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3374.137255] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3374.138881] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3374.140532] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:33:34 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182368, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3374.243306] FAULT_INJECTION: forcing a failure. [ 3374.243306] name failslab, interval 1, probability 0, space 0, times 0 [ 3374.244730] CPU: 1 PID: 16282 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3374.245550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3374.245554] Call Trace: [ 3374.245570] dump_stack+0x107/0x167 [ 3374.245581] should_fail.cold+0x5/0xa [ 3374.245594] ? create_object.isra.0+0x3a/0xa30 [ 3374.245604] should_failslab+0x5/0x20 [ 3374.245614] kmem_cache_alloc+0x5b/0x310 [ 3374.245627] create_object.isra.0+0x3a/0xa30 [ 3374.245636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3374.245648] kmem_cache_alloc+0x159/0x310 [ 3374.245662] __kernfs_new_node+0xd4/0x860 [ 3374.245673] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3374.245681] ? kernfs_add_one+0x36e/0x4d0 [ 3374.245694] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3374.245705] ? wait_for_completion_io+0x270/0x270 [ 3374.245715] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 3374.245728] kernfs_new_node+0x18d/0x250 [ 3374.245740] __kernfs_create_file+0x51/0x350 [ 3374.245753] sysfs_add_file_mode_ns+0x221/0x560 [ 3374.245768] internal_create_group+0x324/0xba0 [ 3374.245782] ? sysfs_remove_group+0x170/0x170 [ 3374.245795] ? lockdep_init_map_type+0x2c7/0x780 [ 3374.245807] ? blk_queue_flag_set+0x22/0x30 [ 3374.245817] ? __loop_update_dio+0x2d2/0x690 [ 3374.245830] loop_configure+0x953/0x1410 [ 3374.245846] lo_ioctl+0xa57/0x16b0 [ 3374.245859] ? avc_has_extended_perms+0x7f1/0xf40 [ 3374.245871] ? loop_set_status_old+0x250/0x250 [ 3374.245883] ? avc_ss_reset+0x180/0x180 [ 3374.245894] ? find_held_lock+0x2c/0x110 [ 3374.245910] ? __lock_acquire+0xbb1/0x5b00 [ 3374.245943] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3374.245954] ? generic_block_fiemap+0x60/0x60 [ 3374.245964] ? lock_downgrade+0x6d0/0x6d0 [ 3374.245973] ? build_open_flags+0x6f0/0x6f0 [ 3374.245987] ? loop_set_status_old+0x250/0x250 [ 3374.245996] blkdev_ioctl+0x291/0x710 [ 3374.246006] ? blkdev_common_ioctl+0x1930/0x1930 [ 3374.246018] ? selinux_file_ioctl+0xb6/0x270 [ 3374.246031] block_ioctl+0xf9/0x140 [ 3374.246040] ? blkdev_read_iter+0x1c0/0x1c0 [ 3374.246050] __x64_sys_ioctl+0x19a/0x210 [ 3374.246062] do_syscall_64+0x33/0x40 [ 3374.246072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3374.246080] RIP: 0033:0x7fcd90ea58d7 [ 3374.246090] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3374.246095] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3374.246107] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3374.246112] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3374.246118] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3374.246124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3374.246129] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3374.249459] loop5: detected capacity change from 0 to 2048 [ 3374.307760] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:47 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x4018236c, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x6f00) 17:33:47 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x600, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:33:47 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 76) 17:33:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') setxattr$incfs_metadata(&(0x7f0000000600)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)="d063cab416e70b058627507690579319c79a28332cc437432214a475a0fce379084cbaee3bba28f661b734801655bb77b69bf07c89be39e17c252f966b325d79705747141855d21f4ad63b052766165911da511b05aac7f3280efdfac77c1b942f0dea72d1b101d84cbd050f29a6d1dfd80104ba3c478f868cf43931a4f628e967dd0fcabd95515a68cdc7cbe046bbdf8942708bd12d6dea37564578acafc4c266c4b01de6cdba97faaedf3dc97c7e09a15479c3fcc8c552df", 0xb9, 0x2) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:33:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x2000) 17:33:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x48, 0x0, &(0x7f0000000c80)) 17:33:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 43) [ 3386.438157] FAULT_INJECTION: forcing a failure. [ 3386.438157] name failslab, interval 1, probability 0, space 0, times 0 [ 3386.439428] CPU: 1 PID: 16304 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3386.440217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3386.441132] Call Trace: [ 3386.441444] dump_stack+0x107/0x167 [ 3386.441844] should_fail.cold+0x5/0xa [ 3386.442254] ? xas_alloc+0x336/0x440 [ 3386.442408] loop5: detected capacity change from 0 to 2048 [ 3386.442671] should_failslab+0x5/0x20 [ 3386.444140] FAULT_INJECTION: forcing a failure. [ 3386.444140] name failslab, interval 1, probability 0, space 0, times 0 [ 3386.444493] kmem_cache_alloc+0x5b/0x310 [ 3386.444509] xas_alloc+0x336/0x440 [ 3386.448071] xas_create+0x34a/0x10d0 [ 3386.448476] ? kernel_text_address+0xf2/0x120 [ 3386.448958] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3386.449524] xas_store+0x8c/0x1c40 [ 3386.449911] __xa_store+0x164/0x2d0 [ 3386.450301] ? xa_delete_node+0x280/0x280 [ 3386.450757] ? trace_hardirqs_on+0x5b/0x180 [ 3386.451226] xa_store+0x31/0x50 [ 3386.451603] __io_uring_add_tctx_node+0x1cf/0x520 [ 3386.452156] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3386.452749] ? alloc_fd+0x2e7/0x670 [ 3386.453144] io_uring_setup+0x1fbb/0x2980 [ 3386.453621] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3386.454164] ? wait_for_completion_io+0x270/0x270 [ 3386.454725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3386.455291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3386.455892] do_syscall_64+0x33/0x40 [ 3386.456291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3386.456882] RIP: 0033:0x7f15cb12cb19 [ 3386.457281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3386.459250] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3386.460079] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3386.460841] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3386.461604] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3386.462375] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3386.463137] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3386.464012] CPU: 0 PID: 16309 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3386.465820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3386.467937] Call Trace: [ 3386.468615] dump_stack+0x107/0x167 [ 3386.469528] should_fail.cold+0x5/0xa [ 3386.470502] ? kobject_uevent_env+0x22b/0xfd0 [ 3386.471640] ? dev_uevent_filter+0xd0/0xd0 [ 3386.472717] should_failslab+0x5/0x20 [ 3386.473698] kmem_cache_alloc_trace+0x55/0x320 [ 3386.474874] ? dev_uevent_filter+0xd0/0xd0 [ 3386.475943] kobject_uevent_env+0x22b/0xfd0 [ 3386.477012] ? get_disk_and_module+0xf0/0xf0 [ 3386.477974] ? blk_queue_flag_set+0x22/0x30 [ 3386.478936] ? __loop_update_dio+0x2d2/0x690 [ 3386.479931] loop_configure+0x1118/0x1410 [ 3386.480849] lo_ioctl+0xa57/0x16b0 [ 3386.481632] ? avc_has_extended_perms+0x7f1/0xf40 [ 3386.482719] ? loop_set_status_old+0x250/0x250 [ 3386.483760] ? avc_ss_reset+0x180/0x180 [ 3386.484649] ? find_held_lock+0x2c/0x110 [ 3386.485567] ? __lock_acquire+0xbb1/0x5b00 [ 3386.486577] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3386.487758] ? generic_block_fiemap+0x60/0x60 [ 3386.488771] ? lock_downgrade+0x6d0/0x6d0 [ 3386.489704] ? build_open_flags+0x6f0/0x6f0 [ 3386.490669] ? loop_set_status_old+0x250/0x250 [ 3386.491699] blkdev_ioctl+0x291/0x710 [ 3386.492557] ? blkdev_common_ioctl+0x1930/0x1930 [ 3386.493611] ? selinux_file_ioctl+0xb6/0x270 [ 3386.494607] block_ioctl+0xf9/0x140 [ 3386.495419] ? blkdev_read_iter+0x1c0/0x1c0 [ 3386.496388] __x64_sys_ioctl+0x19a/0x210 [ 3386.497276] do_syscall_64+0x33/0x40 [ 3386.498106] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3386.499259] RIP: 0033:0x7fcd90ea58d7 [ 3386.500095] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3386.504210] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3386.505936] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3386.507547] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3386.509137] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3386.510695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3386.512325] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3386.530658] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3386.547016] 9pnet: Insufficient options for proto=fd 17:33:47 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 77) [ 3386.576343] 9pnet: Insufficient options for proto=fd 17:33:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 44) [ 3386.604943] FAULT_INJECTION: forcing a failure. [ 3386.604943] name failslab, interval 1, probability 0, space 0, times 0 [ 3386.607501] CPU: 0 PID: 16318 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3386.609063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3386.610932] Call Trace: [ 3386.611532] dump_stack+0x107/0x167 [ 3386.612339] should_fail.cold+0x5/0xa [ 3386.613185] ? create_object.isra.0+0x3a/0xa30 [ 3386.614176] should_failslab+0x5/0x20 [ 3386.615012] kmem_cache_alloc+0x5b/0x310 [ 3386.615923] ? mark_held_locks+0x9e/0xe0 [ 3386.616831] create_object.isra.0+0x3a/0xa30 [ 3386.617814] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3386.618941] kmem_cache_alloc+0x159/0x310 [ 3386.619893] xas_alloc+0x336/0x440 [ 3386.620676] xas_create+0x34a/0x10d0 [ 3386.621496] ? kernel_text_address+0xf2/0x120 [ 3386.622509] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3386.623678] xas_store+0x8c/0x1c40 [ 3386.624488] __xa_store+0x164/0x2d0 [ 3386.625312] ? xa_delete_node+0x280/0x280 [ 3386.626231] ? trace_hardirqs_on+0x5b/0x180 [ 3386.627207] xa_store+0x31/0x50 [ 3386.627954] __io_uring_add_tctx_node+0x1cf/0x520 [ 3386.629034] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3386.630188] ? alloc_fd+0x2e7/0x670 [ 3386.631003] io_uring_setup+0x1fbb/0x2980 [ 3386.631949] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3386.633086] ? wait_for_completion_io+0x270/0x270 [ 3386.634179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3386.635344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3386.636512] do_syscall_64+0x33/0x40 [ 3386.637338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3386.638463] RIP: 0033:0x7f15cb12cb19 [ 3386.639296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3386.643415] RSP: 002b:00007f15c86a2108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3386.645119] RAX: ffffffffffffffda RBX: 00007f15cb23ff60 RCX: 00007f15cb12cb19 [ 3386.646697] RDX: 0000000020ffc000 RSI: 00000000200001c0 RDI: 000000000000583b [ 3386.648299] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100 [ 3386.649857] R10: 0000000020000680 R11: 0000000000000202 R12: 0000000020000100 [ 3386.651445] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3386.666258] loop5: detected capacity change from 0 to 2048 [ 3386.666928] FAULT_INJECTION: forcing a failure. [ 3386.666928] name failslab, interval 1, probability 0, space 0, times 0 [ 3386.668258] CPU: 1 PID: 16322 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3386.669132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3386.670196] Call Trace: [ 3386.670614] dump_stack+0x107/0x167 [ 3386.671020] should_fail.cold+0x5/0xa [ 3386.671434] ? kobject_uevent_env+0x22b/0xfd0 [ 3386.671946] ? dev_uevent_filter+0xd0/0xd0 [ 3386.672412] should_failslab+0x5/0x20 [ 3386.672844] kmem_cache_alloc_trace+0x55/0x320 [ 3386.673342] ? dev_uevent_filter+0xd0/0xd0 [ 3386.673794] kobject_uevent_env+0x22b/0xfd0 [ 3386.674286] ? get_disk_and_module+0xf0/0xf0 [ 3386.674757] ? blk_queue_flag_set+0x22/0x30 [ 3386.675225] ? __loop_update_dio+0x2d2/0x690 [ 3386.675704] loop_configure+0x1118/0x1410 [ 3386.676162] lo_ioctl+0xa57/0x16b0 [ 3386.676550] ? avc_has_extended_perms+0x7f1/0xf40 [ 3386.677064] ? loop_set_status_old+0x250/0x250 [ 3386.677552] ? avc_ss_reset+0x180/0x180 [ 3386.677982] ? find_held_lock+0x2c/0x110 [ 3386.678423] ? __lock_acquire+0xbb1/0x5b00 [ 3386.678897] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3386.679463] ? generic_block_fiemap+0x60/0x60 [ 3386.679950] ? lock_downgrade+0x6d0/0x6d0 [ 3386.680422] ? build_open_flags+0x6f0/0x6f0 [ 3386.680889] ? loop_set_status_old+0x250/0x250 [ 3386.681376] blkdev_ioctl+0x291/0x710 [ 3386.681786] ? blkdev_common_ioctl+0x1930/0x1930 [ 3386.682295] ? selinux_file_ioctl+0xb6/0x270 [ 3386.682803] block_ioctl+0xf9/0x140 [ 3386.683193] ? blkdev_read_iter+0x1c0/0x1c0 [ 3386.683687] __x64_sys_ioctl+0x19a/0x210 [ 3386.684138] do_syscall_64+0x33/0x40 [ 3386.684536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3386.685120] RIP: 0033:0x7fcd90ea58d7 [ 3386.685520] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3386.687533] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3386.688392] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3386.689174] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3386.689947] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3386.690708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3386.691508] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:33:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x8000, 0x11) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mknod(&(0x7f0000000340)='mnt/encrypted_dir\x00', 0x4, 0xffffe9c6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="010200000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000006d6e742f656e637279707465645f64697200"]) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(r2, &(0x7f0000000600)='./mnt\x00', 0x3aa) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:33:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x49, 0x0, &(0x7f0000000c80)) [ 3386.724502] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:33:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 45) 17:33:47 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 78) 17:33:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4a, 0x0, &(0x7f0000000c80)) [ 3386.903698] 9pnet: Insufficient options for proto=fd [ 3386.917202] loop5: detected capacity change from 0 to 2048 [ 3386.917923] FAULT_INJECTION: forcing a failure. [ 3386.917923] name failslab, interval 1, probability 0, space 0, times 0 [ 3386.919173] CPU: 1 PID: 16333 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3386.919967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3386.920939] Call Trace: [ 3386.921253] dump_stack+0x107/0x167 [ 3386.921687] should_fail.cold+0x5/0xa [ 3386.922140] ? create_object.isra.0+0x3a/0xa30 [ 3386.922678] should_failslab+0x5/0x20 [ 3386.923127] kmem_cache_alloc+0x5b/0x310 [ 3386.923597] create_object.isra.0+0x3a/0xa30 [ 3386.924124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3386.924723] kmem_cache_alloc_trace+0x151/0x320 [ 3386.925276] ? dev_uevent_filter+0xd0/0xd0 [ 3386.925767] kobject_uevent_env+0x22b/0xfd0 [ 3386.926273] ? get_disk_and_module+0xf0/0xf0 [ 3386.926796] ? blk_queue_flag_set+0x22/0x30 [ 3386.927288] ? __loop_update_dio+0x2d2/0x690 [ 3386.927821] loop_configure+0x1118/0x1410 [ 3386.928318] lo_ioctl+0xa57/0x16b0 [ 3386.928708] ? avc_has_extended_perms+0x7f1/0xf40 [ 3386.929274] ? loop_set_status_old+0x250/0x250 [ 3386.929803] ? avc_ss_reset+0x180/0x180 [ 3386.930277] ? find_held_lock+0x2c/0x110 [ 3386.930724] ? __lock_acquire+0xbb1/0x5b00 [ 3386.931233] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3386.931828] ? generic_block_fiemap+0x60/0x60 [ 3386.932355] ? lock_downgrade+0x6d0/0x6d0 [ 3386.932826] ? build_open_flags+0x6f0/0x6f0 [ 3386.933296] ? loop_set_status_old+0x250/0x250 [ 3386.933807] blkdev_ioctl+0x291/0x710 [ 3386.934242] ? blkdev_common_ioctl+0x1930/0x1930 [ 3386.934782] ? selinux_file_ioctl+0xb6/0x270 [ 3386.935297] block_ioctl+0xf9/0x140 [ 3386.935720] FAULT_INJECTION: forcing a failure. [ 3386.935720] name failslab, interval 1, probability 0, space 0, times 0 [ 3386.937023] ? blkdev_read_iter+0x1c0/0x1c0 [ 3386.937035] __x64_sys_ioctl+0x19a/0x210 [ 3386.937048] do_syscall_64+0x33/0x40 [ 3386.937059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3386.937067] RIP: 0033:0x7fcd90ea58d7 [ 3386.937077] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3386.937091] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3386.937102] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3386.937108] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3386.937114] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3386.945305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3386.946113] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3386.946945] CPU: 0 PID: 16338 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3386.948512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3386.950386] Call Trace: [ 3386.950408] dump_stack+0x107/0x167 [ 3386.950431] should_fail.cold+0x5/0xa [ 3386.950452] ? vm_area_dup+0x78/0x290 [ 3386.950470] should_failslab+0x5/0x20 [ 3386.950488] kmem_cache_alloc+0x5b/0x310 [ 3386.950514] vm_area_dup+0x78/0x290 [ 3386.950536] ? lock_release+0x680/0x680 [ 3386.950559] ? mark_lock+0xf5/0x2df0 [ 3386.950586] ? lock_chain_count+0x20/0x20 [ 3386.950607] ? mark_lock+0xf5/0x2df0 [ 3386.950633] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3386.950653] ? lock_chain_count+0x20/0x20 [ 3386.950678] ? mark_lock+0xf5/0x2df0 [ 3386.950700] ? vm_area_alloc+0x110/0x110 [ 3386.950723] ? __lock_acquire+0x1657/0x5b00 [ 3386.950762] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3386.950782] ? vmacache_find+0x55/0x2a0 [ 3386.950802] __split_vma+0xa8/0x4e0 [ 3386.950824] __do_munmap+0x365/0x1260 [ 3386.950846] ? arch_get_unmapped_area+0x450/0x450 [ 3386.950868] ? lock_release+0x680/0x680 [ 3386.950889] mmap_region+0x7cc/0x1500 [ 3386.950923] do_mmap+0x868/0x1370 [ 3386.950951] vm_mmap_pgoff+0x198/0x1f0 [ 3386.972279] ? randomize_page+0xb0/0xb0 [ 3386.973180] ksys_mmap_pgoff+0x41c/0x560 [ 3386.974091] ? find_mergeable_anon_vma+0x250/0x250 [ 3386.975206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3386.976391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3386.977511] do_syscall_64+0x33/0x40 [ 3386.978338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3386.979481] RIP: 0033:0x7f15cb12cb62 [ 3386.980328] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3386.984478] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3386.986192] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3386.987806] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3386.989397] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3386.990982] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3386.992583] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3386.999288] 9pnet: Insufficient options for proto=fd [ 3387.008510] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:34:00 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 79) 17:34:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x2300) 17:34:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r10, 0x0) linkat(r5, &(0x7f0000000600)='./mnt\x00', r10, &(0x7f0000000680)='./mnt\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:34:00 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x601, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:34:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x7000) 17:34:00 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182374, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:34:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 46) 17:34:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4b, 0x0, &(0x7f0000000c80)) [ 3399.583974] FAULT_INJECTION: forcing a failure. [ 3399.583974] name failslab, interval 1, probability 0, space 0, times 0 [ 3399.586435] CPU: 0 PID: 16360 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3399.587907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3399.589841] Call Trace: [ 3399.590403] dump_stack+0x107/0x167 [ 3399.591184] should_fail.cold+0x5/0xa [ 3399.592013] ? create_object.isra.0+0x3a/0xa30 [ 3399.592979] should_failslab+0x5/0x20 [ 3399.593786] kmem_cache_alloc+0x5b/0x310 [ 3399.594649] create_object.isra.0+0x3a/0xa30 [ 3399.595575] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3399.596657] kmem_cache_alloc+0x159/0x310 [ 3399.597536] vm_area_dup+0x78/0x290 [ 3399.598309] ? lock_release+0x680/0x680 [ 3399.599155] ? mark_lock+0xf5/0x2df0 [ 3399.599969] ? lock_chain_count+0x20/0x20 [ 3399.600847] ? mark_lock+0xf5/0x2df0 [ 3399.601643] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3399.602758] ? lock_chain_count+0x20/0x20 [ 3399.603644] ? mark_lock+0xf5/0x2df0 [ 3399.604443] ? vm_area_alloc+0x110/0x110 [ 3399.605322] ? __lock_acquire+0x1657/0x5b00 [ 3399.606263] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3399.607395] ? vmacache_find+0x55/0x2a0 [ 3399.608248] __split_vma+0xa8/0x4e0 [ 3399.609020] __do_munmap+0x365/0x1260 [ 3399.609835] ? arch_get_unmapped_area+0x450/0x450 [ 3399.610873] ? lock_release+0x680/0x680 [ 3399.611718] mmap_region+0x7cc/0x1500 [ 3399.612542] do_mmap+0x868/0x1370 [ 3399.613287] vm_mmap_pgoff+0x198/0x1f0 [ 3399.614130] ? randomize_page+0xb0/0xb0 [ 3399.614994] ksys_mmap_pgoff+0x41c/0x560 [ 3399.615873] ? find_mergeable_anon_vma+0x250/0x250 [ 3399.616941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3399.618089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3399.619206] do_syscall_64+0x33/0x40 [ 3399.620014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3399.621133] RIP: 0033:0x7f15cb12cb62 [ 3399.621925] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3399.625870] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3399.627481] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3399.629023] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3399.630562] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3399.632130] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3399.633697] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3399.647185] loop5: detected capacity change from 0 to 2048 [ 3399.657458] FAULT_INJECTION: forcing a failure. [ 3399.657458] name failslab, interval 1, probability 0, space 0, times 0 [ 3399.660220] CPU: 0 PID: 16365 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3399.661894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3399.663764] Call Trace: [ 3399.664335] dump_stack+0x107/0x167 [ 3399.665138] should_fail.cold+0x5/0xa [ 3399.665981] ? create_object.isra.0+0x3a/0xa30 [ 3399.667005] should_failslab+0x5/0x20 [ 3399.667825] kmem_cache_alloc+0x5b/0x310 [ 3399.668739] create_object.isra.0+0x3a/0xa30 [ 3399.669715] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3399.670805] kmem_cache_alloc_trace+0x151/0x320 [ 3399.671858] ? dev_uevent_filter+0xd0/0xd0 [ 3399.672809] kobject_uevent_env+0x22b/0xfd0 [ 3399.673787] ? get_disk_and_module+0xf0/0xf0 [ 3399.674710] ? blk_queue_flag_set+0x22/0x30 [ 3399.675672] ? __loop_update_dio+0x2d2/0x690 [ 3399.676675] loop_configure+0x1118/0x1410 [ 3399.677619] lo_ioctl+0xa57/0x16b0 [ 3399.678394] ? avc_has_extended_perms+0x7f1/0xf40 [ 3399.679472] ? loop_set_status_old+0x250/0x250 [ 3399.680514] ? avc_ss_reset+0x180/0x180 [ 3399.681377] ? find_held_lock+0x2c/0x110 [ 3399.682299] ? __lock_acquire+0xbb1/0x5b00 [ 3399.683296] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3399.684470] ? generic_block_fiemap+0x60/0x60 [ 3399.685466] ? lock_downgrade+0x6d0/0x6d0 [ 3399.686422] ? build_open_flags+0x6f0/0x6f0 [ 3399.687388] ? loop_set_status_old+0x250/0x250 [ 3399.688404] blkdev_ioctl+0x291/0x710 [ 3399.689270] ? blkdev_common_ioctl+0x1930/0x1930 [ 3399.690309] ? selinux_file_ioctl+0xb6/0x270 [ 3399.691278] block_ioctl+0xf9/0x140 [ 3399.692110] ? blkdev_read_iter+0x1c0/0x1c0 [ 3399.693081] __x64_sys_ioctl+0x19a/0x210 [ 3399.693947] do_syscall_64+0x33/0x40 [ 3399.694804] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3399.695986] RIP: 0033:0x7fcd90ea58d7 [ 3399.696764] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3399.700930] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3399.702410] 9pnet: Insufficient options for proto=fd [ 3399.702682] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3399.702695] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3399.702708] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 17:34:00 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 80) [ 3399.702737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3399.710816] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3399.743396] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3399.825866] FAULT_INJECTION: forcing a failure. [ 3399.825866] name failslab, interval 1, probability 0, space 0, times 0 [ 3399.828734] CPU: 0 PID: 16370 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3399.830364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3399.832392] Call Trace: [ 3399.833043] dump_stack+0x107/0x167 [ 3399.833931] should_fail.cold+0x5/0xa [ 3399.834865] ? anon_vma_clone+0xdc/0x590 [ 3399.835850] should_failslab+0x5/0x20 [ 3399.836798] kmem_cache_alloc+0x5b/0x310 [ 3399.837819] anon_vma_clone+0xdc/0x590 [ 3399.838798] __split_vma+0x17c/0x4e0 [ 3399.839732] __do_munmap+0x365/0x1260 [ 3399.840702] ? arch_get_unmapped_area+0x450/0x450 [ 3399.841783] ? lock_release+0x680/0x680 [ 3399.842612] mmap_region+0x7cc/0x1500 [ 3399.843425] do_mmap+0x868/0x1370 [ 3399.844166] vm_mmap_pgoff+0x198/0x1f0 [ 3399.844986] ? randomize_page+0xb0/0xb0 [ 3399.845842] ksys_mmap_pgoff+0x41c/0x560 [ 3399.846688] ? find_mergeable_anon_vma+0x250/0x250 [ 3399.847731] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3399.848844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3399.849931] do_syscall_64+0x33/0x40 [ 3399.850708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3399.851784] RIP: 0033:0x7f15cb12cb62 [ 3399.852568] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3399.856438] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3399.858045] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3399.859552] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3399.861054] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3399.862548] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3399.864049] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:34:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 47) 17:34:14 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x700, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:34:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:34:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4c, 0x0, &(0x7f0000000c80)) 17:34:14 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 81) 17:34:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x3f00) 17:34:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xd610) 17:34:14 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x4018237a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3413.851450] FAULT_INJECTION: forcing a failure. [ 3413.851450] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.853969] CPU: 0 PID: 16392 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3413.855563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3413.857343] Call Trace: [ 3413.857370] dump_stack+0x107/0x167 [ 3413.857392] should_fail.cold+0x5/0xa [ 3413.857413] ? create_object.isra.0+0x3a/0xa30 [ 3413.857431] should_failslab+0x5/0x20 [ 3413.857449] kmem_cache_alloc+0x5b/0x310 [ 3413.857473] create_object.isra.0+0x3a/0xa30 [ 3413.857489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3413.857513] kmem_cache_alloc+0x159/0x310 [ 3413.857538] anon_vma_clone+0xdc/0x590 [ 3413.857563] __split_vma+0x17c/0x4e0 17:34:14 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 82) [ 3413.857584] __do_munmap+0x365/0x1260 [ 3413.857605] ? arch_get_unmapped_area+0x450/0x450 [ 3413.857627] ? lock_release+0x680/0x680 [ 3413.857647] mmap_region+0x7cc/0x1500 [ 3413.857678] do_mmap+0x868/0x1370 [ 3413.857705] vm_mmap_pgoff+0x198/0x1f0 [ 3413.857727] ? randomize_page+0xb0/0xb0 [ 3413.857759] ksys_mmap_pgoff+0x41c/0x560 [ 3413.857779] ? find_mergeable_anon_vma+0x250/0x250 [ 3413.857802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3413.857823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3413.857844] do_syscall_64+0x33/0x40 [ 3413.857864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3413.857877] RIP: 0033:0x7f15cb12cb62 [ 3413.857894] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3413.857905] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3413.857924] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3413.857935] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3413.857946] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3413.857957] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3413.857967] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3413.872418] loop5: detected capacity change from 0 to 2048 [ 3413.872576] FAULT_INJECTION: forcing a failure. [ 3413.872576] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.872707] CPU: 1 PID: 16395 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3413.872717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3413.872722] Call Trace: [ 3413.872744] dump_stack+0x107/0x167 [ 3413.872765] should_fail.cold+0x5/0xa [ 3413.872787] ? __alloc_skb+0x6d/0x5b0 [ 3413.872803] should_failslab+0x5/0x20 [ 3413.872822] kmem_cache_alloc_node+0x55/0x330 [ 3413.872847] __alloc_skb+0x6d/0x5b0 [ 3413.872873] alloc_uevent_skb+0x7b/0x210 [ 3413.872896] kobject_uevent_env+0x99a/0xfd0 [ 3413.872918] ? blk_queue_flag_set+0x22/0x30 [ 3413.872936] ? __loop_update_dio+0x2d2/0x690 [ 3413.872960] loop_configure+0x1118/0x1410 [ 3413.872991] lo_ioctl+0xa57/0x16b0 [ 3413.873012] ? avc_has_extended_perms+0x7f1/0xf40 [ 3413.873042] ? loop_set_status_old+0x250/0x250 [ 3413.873065] ? avc_ss_reset+0x180/0x180 [ 3413.873086] ? find_held_lock+0x2c/0x110 [ 3413.873116] ? __lock_acquire+0xbb1/0x5b00 [ 3413.873179] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3413.873198] ? generic_block_fiemap+0x60/0x60 [ 3413.873216] ? lock_downgrade+0x6d0/0x6d0 [ 3413.873239] ? build_open_flags+0x6f0/0x6f0 [ 3413.873268] ? loop_set_status_old+0x250/0x250 [ 3413.873284] blkdev_ioctl+0x291/0x710 [ 3413.873305] ? blkdev_common_ioctl+0x1930/0x1930 [ 3413.873328] ? selinux_file_ioctl+0xb6/0x270 [ 3413.873351] block_ioctl+0xf9/0x140 [ 3413.873368] ? blkdev_read_iter+0x1c0/0x1c0 [ 3413.873388] __x64_sys_ioctl+0x19a/0x210 [ 3413.873410] do_syscall_64+0x33/0x40 [ 3413.873429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3413.873441] RIP: 0033:0x7fcd90ea58d7 [ 3413.873458] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3413.873469] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3413.873489] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3413.873499] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3413.873509] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3413.873520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3413.873530] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3413.908388] 9pnet: Insufficient options for proto=fd [ 3413.914903] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3413.985671] 9pnet: Insufficient options for proto=fd [ 3414.088941] FAULT_INJECTION: forcing a failure. [ 3414.088941] name failslab, interval 1, probability 0, space 0, times 0 [ 3414.091507] CPU: 0 PID: 16409 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3414.093076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3414.094826] Call Trace: [ 3414.095389] dump_stack+0x107/0x167 [ 3414.096172] should_fail.cold+0x5/0xa [ 3414.096979] ? vm_area_alloc+0x1c/0x110 [ 3414.097799] should_failslab+0x5/0x20 [ 3414.098595] kmem_cache_alloc+0x5b/0x310 [ 3414.099447] vm_area_alloc+0x1c/0x110 [ 3414.100255] mmap_region+0x982/0x1500 [ 3414.101074] do_mmap+0x868/0x1370 [ 3414.101815] vm_mmap_pgoff+0x198/0x1f0 [ 3414.102637] ? randomize_page+0xb0/0xb0 [ 3414.103486] ksys_mmap_pgoff+0x41c/0x560 [ 3414.104359] ? find_mergeable_anon_vma+0x250/0x250 [ 3414.105404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3414.106506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3414.107606] do_syscall_64+0x33/0x40 [ 3414.108412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3414.109488] RIP: 0033:0x7f15cb12cb62 [ 3414.110272] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3414.114179] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3414.115781] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3414.117351] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3414.118871] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3414.120384] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3414.121893] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:34:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 48) 17:34:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4d, 0x0, &(0x7f0000000c80)) [ 3414.138693] loop5: detected capacity change from 0 to 2048 [ 3414.140912] FAULT_INJECTION: forcing a failure. [ 3414.140912] name failslab, interval 1, probability 0, space 0, times 0 [ 3414.143690] CPU: 1 PID: 16414 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3414.145180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3414.146910] Call Trace: [ 3414.147464] dump_stack+0x107/0x167 [ 3414.148241] should_fail.cold+0x5/0xa [ 3414.149052] ? create_object.isra.0+0x3a/0xa30 [ 3414.150010] should_failslab+0x5/0x20 [ 3414.150812] kmem_cache_alloc+0x5b/0x310 [ 3414.151671] create_object.isra.0+0x3a/0xa30 [ 3414.152607] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3414.153683] kmem_cache_alloc_node+0x169/0x330 [ 3414.154654] __alloc_skb+0x6d/0x5b0 [ 3414.155426] alloc_uevent_skb+0x7b/0x210 [ 3414.156297] kobject_uevent_env+0x99a/0xfd0 [ 3414.157223] ? blk_queue_flag_set+0x22/0x30 [ 3414.158135] ? __loop_update_dio+0x2d2/0x690 [ 3414.159067] loop_configure+0x1118/0x1410 [ 3414.159954] lo_ioctl+0xa57/0x16b0 [ 3414.160714] ? avc_has_extended_perms+0x7f1/0xf40 [ 3414.161738] ? loop_set_status_old+0x250/0x250 [ 3414.162711] ? avc_ss_reset+0x180/0x180 [ 3414.163546] ? __lock_acquire+0x1657/0x5b00 [ 3414.164479] ? __lock_acquire+0xbb1/0x5b00 [ 3414.165417] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3414.166513] ? generic_block_fiemap+0x60/0x60 [ 3414.167431] ? lock_downgrade+0x6d0/0x6d0 [ 3414.168313] ? __switch_to_asm+0x3a/0x60 [ 3414.169179] ? __switch_to_asm+0x34/0x60 [ 3414.170043] ? loop_set_status_old+0x250/0x250 [ 3414.171020] blkdev_ioctl+0x291/0x710 [ 3414.171829] ? blkdev_common_ioctl+0x1930/0x1930 [ 3414.172852] ? selinux_file_ioctl+0xb6/0x270 [ 3414.173782] block_ioctl+0xf9/0x140 [ 3414.174568] ? blkdev_read_iter+0x1c0/0x1c0 [ 3414.175488] __x64_sys_ioctl+0x19a/0x210 [ 3414.176361] do_syscall_64+0x33/0x40 [ 3414.177146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3414.178242] RIP: 0033:0x7fcd90ea58d7 [ 3414.179029] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3414.182933] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3414.184556] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3414.186067] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3414.187576] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3414.189078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3414.190562] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3414.210130] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:34:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x18}, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:34:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4e, 0x0, &(0x7f0000000c80)) 17:34:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 49) 17:34:15 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 83) [ 3414.375706] loop5: detected capacity change from 0 to 2048 [ 3414.377732] FAULT_INJECTION: forcing a failure. [ 3414.377732] name failslab, interval 1, probability 0, space 0, times 0 [ 3414.380640] CPU: 1 PID: 16425 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3414.382312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3414.384316] Call Trace: [ 3414.384961] dump_stack+0x107/0x167 [ 3414.385839] should_fail.cold+0x5/0xa [ 3414.386780] should_failslab+0x5/0x20 [ 3414.387692] __kmalloc_node_track_caller+0x74/0x3b0 [ 3414.388894] ? alloc_uevent_skb+0x7b/0x210 [ 3414.389930] __alloc_skb+0xb1/0x5b0 [ 3414.390805] alloc_uevent_skb+0x7b/0x210 [ 3414.391781] kobject_uevent_env+0x99a/0xfd0 [ 3414.392827] ? blk_queue_flag_set+0x22/0x30 [ 3414.393857] ? __loop_update_dio+0x2d2/0x690 [ 3414.394910] loop_configure+0x1118/0x1410 [ 3414.395911] lo_ioctl+0xa57/0x16b0 [ 3414.396762] ? avc_has_extended_perms+0x7f1/0xf40 [ 3414.397914] ? loop_set_status_old+0x250/0x250 [ 3414.399014] ? avc_ss_reset+0x180/0x180 [ 3414.400004] ? __lock_acquire+0xbb1/0x5b00 [ 3414.401064] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3414.402318] ? generic_block_fiemap+0x60/0x60 [ 3414.403393] ? lock_downgrade+0x6d0/0x6d0 [ 3414.404406] ? loop_set_status_old+0x250/0x250 [ 3414.405510] blkdev_ioctl+0x291/0x710 [ 3414.406421] ? blkdev_common_ioctl+0x1930/0x1930 [ 3414.407548] ? selinux_file_ioctl+0xb6/0x270 [ 3414.407677] 9pnet: Insufficient options for proto=fd [ 3414.408608] block_ioctl+0xf9/0x140 [ 3414.408628] ? blkdev_read_iter+0x1c0/0x1c0 [ 3414.408651] __x64_sys_ioctl+0x19a/0x210 [ 3414.408682] do_syscall_64+0x33/0x40 [ 3414.413365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3414.414583] RIP: 0033:0x7fcd90ea58d7 [ 3414.415471] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3414.419824] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3414.421632] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 17:34:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xe703) [ 3414.423317] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3414.425207] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3414.425643] FAULT_INJECTION: forcing a failure. [ 3414.425643] name failslab, interval 1, probability 0, space 0, times 0 [ 3414.426892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3414.426904] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3414.431994] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3414.432063] CPU: 0 PID: 16428 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3414.435232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3414.436865] Call Trace: [ 3414.437382] dump_stack+0x107/0x167 [ 3414.438100] should_fail.cold+0x5/0xa [ 3414.438861] ? create_object.isra.0+0x3a/0xa30 [ 3414.439752] should_failslab+0x5/0x20 [ 3414.440560] kmem_cache_alloc+0x5b/0x310 [ 3414.441364] create_object.isra.0+0x3a/0xa30 [ 3414.442215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3414.443215] kmem_cache_alloc+0x159/0x310 [ 3414.444043] vm_area_alloc+0x1c/0x110 [ 3414.444789] mmap_region+0x982/0x1500 [ 3414.445538] do_mmap+0x868/0x1370 [ 3414.446230] vm_mmap_pgoff+0x198/0x1f0 [ 3414.446994] ? randomize_page+0xb0/0xb0 [ 3414.447783] ksys_mmap_pgoff+0x41c/0x560 [ 3414.448587] ? find_mergeable_anon_vma+0x250/0x250 [ 3414.449543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3414.450573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3414.451580] do_syscall_64+0x33/0x40 [ 3414.452316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3414.453324] RIP: 0033:0x7f15cb12cb62 [ 3414.454058] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3414.457610] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3414.459087] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3414.460502] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3414.461901] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3414.463279] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3414.464657] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3414.498641] 9pnet: Insufficient options for proto=fd 17:34:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 50) 17:34:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x4000) 17:34:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x12, 0x0, &(0x7f0000000c80)) 17:34:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, 'mnt/encrypted_dir\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3d68534cc9ec62b58ec15ea761169468a0508c85117c39d884854bc99986406775e8c076e2481000f679ce8b8e1381a646e24866e9b19607bd4e5a7a8b633c0961feaa09240636c39117ddf6bedd388a6d28abe13e6359d8368ae03dabe9c9fb4ec1fb6fac3a9a35249ab79a21c44f", @ANYRESHEX=r6, @ANYBLOB=',nodevmap,aname=\x00,nodevmap,version=9p2000.u,context=unconfined_u,smackfstransmute=\x00,\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 17:34:27 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x803, 0x0, 0x0, 0x0, {r2}}, 0x58) 17:34:27 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 84) 17:34:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xf550) 17:34:27 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x401823f8, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3426.697181] loop5: detected capacity change from 0 to 2048 [ 3426.698090] FAULT_INJECTION: forcing a failure. [ 3426.698090] name failslab, interval 1, probability 0, space 0, times 0 [ 3426.699861] CPU: 1 PID: 16452 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 3426.700833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3426.701944] Call Trace: [ 3426.702288] dump_stack+0x107/0x167 [ 3426.702754] should_fail.cold+0x5/0xa [ 3426.703244] ? create_object.isra.0+0x3a/0xa30 [ 3426.703815] should_failslab+0x5/0x20 [ 3426.704303] kmem_cache_alloc+0x5b/0x310 [ 3426.704813] create_object.isra.0+0x3a/0xa30 [ 3426.705362] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3426.706004] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3426.706639] ? alloc_uevent_skb+0x7b/0x210 [ 3426.707179] __alloc_skb+0xb1/0x5b0 [ 3426.707645] alloc_uevent_skb+0x7b/0x210 [ 3426.708157] kobject_uevent_env+0x99a/0xfd0 [ 3426.708708] ? blk_queue_flag_set+0x22/0x30 [ 3426.709248] ? __loop_update_dio+0x2d2/0x690 [ 3426.709800] loop_configure+0x1118/0x1410 [ 3426.710325] lo_ioctl+0xa57/0x16b0 [ 3426.710774] ? avc_has_extended_perms+0x7f1/0xf40 [ 3426.711375] ? loop_set_status_old+0x250/0x250 [ 3426.711957] ? avc_ss_reset+0x180/0x180 [ 3426.712460] ? find_held_lock+0x2c/0x110 [ 3426.712971] ? __lock_acquire+0xbb1/0x5b00 [ 3426.713529] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3426.714185] ? generic_block_fiemap+0x60/0x60 [ 3426.714738] ? lock_downgrade+0x6d0/0x6d0 [ 3426.715263] ? build_open_flags+0x6f0/0x6f0 [ 3426.715817] ? loop_set_status_old+0x250/0x250 [ 3426.716391] blkdev_ioctl+0x291/0x710 [ 3426.716864] ? blkdev_common_ioctl+0x1930/0x1930 [ 3426.717456] ? selinux_file_ioctl+0xb6/0x270 [ 3426.718175] block_ioctl+0xf9/0x140 [ 3426.718625] ? blkdev_read_iter+0x1c0/0x1c0 [ 3426.719276] __x64_sys_ioctl+0x19a/0x210 [ 3426.719853] do_syscall_64+0x33/0x40 [ 3426.720337] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3426.720971] RIP: 0033:0x7fcd90ea58d7 [ 3426.721435] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3426.723720] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3426.724689] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3426.725572] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3426.726457] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3426.727345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3426.728236] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3426.732628] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3426.745391] FAULT_INJECTION: forcing a failure. [ 3426.745391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3426.747950] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 3426.749556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3426.751307] Call Trace: [ 3426.751872] dump_stack+0x107/0x167 [ 3426.752648] should_fail.cold+0x5/0xa [ 3426.753446] __alloc_pages_nodemask+0x182/0x600 [ 3426.754419] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3426.755710] ? walk_mem_res+0x170/0x170 [ 3426.756668] alloc_pages_current+0x187/0x280 [ 3426.757611] pte_alloc_one+0x16/0x1a0 [ 3426.758408] __pte_alloc+0x1d/0x330 [ 3426.759173] remap_pfn_range_internal+0x9a3/0xf60 [ 3426.760188] ? lookup_memtype+0x5b/0x200 [ 3426.761067] ? apply_to_existing_page_range+0x40/0x40 [ 3426.762154] remap_pfn_range+0xcd/0x160 [ 3426.763096] ? remap_pfn_range_notrack+0x70/0x70 [ 3426.764141] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3426.765245] io_uring_mmap+0x398/0x530 [ 3426.766066] mmap_file+0x5e/0xe0 [ 3426.766439] 9pnet: Insufficient options for proto=fd [ 3426.766804] mmap_region+0xc4d/0x1500 [ 3426.768333] do_mmap+0x868/0x1370 [ 3426.769070] vm_mmap_pgoff+0x198/0x1f0 [ 3426.769883] ? randomize_page+0xb0/0xb0 [ 3426.770722] ksys_mmap_pgoff+0x41c/0x560 [ 3426.771603] ? find_mergeable_anon_vma+0x250/0x250 [ 3426.772875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3426.773993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3426.775067] do_syscall_64+0x33/0x40 [ 3426.775842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3426.776921] RIP: 0033:0x7f15cb12cb62 [ 3426.777695] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3426.781537] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3426.783127] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3426.784705] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3426.786200] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3426.786240] 9pnet: Insufficient options for proto=fd [ 3426.787682] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3426.787694] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3426.792067] ------------[ cut here ]------------ [ 3426.793137] WARNING: CPU: 0 PID: 16456 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 3426.795135] Modules linked in: [ 3426.795987] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.10.260 #1 17:34:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x12, 0x0, &(0x7f0000000c80)=0x10) [ 3426.798096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3426.800381] RIP: 0010:get_pat_info+0x216/0x270 [ 3426.801534] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 e1 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 ca 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 85 ae 5a 00 e9 [ 3426.807937] RSP: 0018:ffff88804a7e7890 EFLAGS: 00010212 [ 3426.811673] RAX: 0000000000014cfc RBX: ffff88800ffc0400 RCX: ffffc90008a2c000 [ 3426.813243] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 3426.814726] RBP: ffff88804a7e7948 R08: 0000000000000000 R09: ffff88804a7e7818 [ 3426.816400] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 3426.818143] R13: 1ffff110094fcf12 R14: 0000000000000000 R15: ffff88800ffc0450 [ 3426.819759] FS: 00007f15c86a2700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 3426.821689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3426.822972] CR2: 0000000020001d80 CR3: 0000000044fba000 CR4: 0000000000350ef0 [ 3426.824644] Call Trace: [ 3426.825378] ? pgprot_writethrough+0xc0/0xc0 [ 3426.826454] ? finish_task_switch+0x126/0x5d0 [ 3426.827506] ? finish_task_switch+0xef/0x5d0 [ 3426.828612] untrack_pfn+0xdc/0x240 [ 3426.829587] ? track_pfn_insert+0x150/0x150 [ 3426.830630] ? lock_downgrade+0x6d0/0x6d0 [ 3426.831689] ? uprobe_munmap+0x1c/0x670 [ 3426.832643] unmap_single_vma+0x1bc/0x300 [ 3426.833695] zap_page_range_single+0x2ce/0x450 [ 3426.834825] ? unmap_single_vma+0x300/0x300 [ 3426.835850] ? remap_pfn_range_internal+0xc56/0xf60 [ 3426.837148] ? lookup_memtype+0x5b/0x200 [ 3426.838146] ? apply_to_existing_page_range+0x40/0x40 [ 3426.839427] remap_pfn_range+0x139/0x160 [ 3426.840478] ? remap_pfn_range_notrack+0x70/0x70 [ 3426.841653] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3426.842959] io_uring_mmap+0x398/0x530 [ 3426.843908] mmap_file+0x5e/0xe0 [ 3426.844888] mmap_region+0xc4d/0x1500 [ 3426.845901] do_mmap+0x868/0x1370 [ 3426.846766] vm_mmap_pgoff+0x198/0x1f0 [ 3426.847832] ? randomize_page+0xb0/0xb0 [ 3426.848844] ksys_mmap_pgoff+0x41c/0x560 [ 3426.849888] ? find_mergeable_anon_vma+0x250/0x250 [ 3426.851163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3426.852431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3426.853737] do_syscall_64+0x33/0x40 [ 3426.854685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3426.855922] RIP: 0033:0x7f15cb12cb62 [ 3426.856961] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3426.860901] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3426.862659] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3426.864281] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3426.866015] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3426.867691] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3426.869426] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 [ 3426.871187] irq event stamp: 1623 [ 3426.872102] hardirqs last enabled at (1635): [] console_unlock+0x92d/0xb40 [ 3426.874218] hardirqs last disabled at (1646): [] console_unlock+0x839/0xb40 [ 3426.876274] softirqs last enabled at (990): [] asm_call_irq_on_stack+0x12/0x20 [ 3426.878329] softirqs last disabled at (937): [] asm_call_irq_on_stack+0x12/0x20 [ 3426.880478] ---[ end trace ca2cbecb6c59b770 ]--- 17:34:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 51) 17:34:27 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 85) [ 3426.922911] loop5: detected capacity change from 0 to 2048 [ 3426.923740] FAULT_INJECTION: forcing a failure. [ 3426.923740] name failslab, interval 1, probability 0, space 0, times 0 [ 3426.925319] CPU: 1 PID: 16467 Comm: syz-executor.5 Tainted: G W 5.10.260 #1 [ 3426.926347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3426.927424] Call Trace: [ 3426.927791] dump_stack+0x107/0x167 [ 3426.928322] should_fail.cold+0x5/0xa [ 3426.928892] ? create_object.isra.0+0x3a/0xa30 [ 3426.929586] should_failslab+0x5/0x20 [ 3426.930062] kmem_cache_alloc+0x5b/0x310 [ 3426.930529] create_object.isra.0+0x3a/0xa30 [ 3426.931029] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3426.931641] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3426.932352] ? alloc_uevent_skb+0x7b/0x210 [ 3426.932994] __alloc_skb+0xb1/0x5b0 [ 3426.933581] alloc_uevent_skb+0x7b/0x210 [ 3426.934047] kobject_uevent_env+0x99a/0xfd0 [ 3426.934593] ? blk_queue_flag_set+0x22/0x30 [ 3426.935202] ? __loop_update_dio+0x2d2/0x690 [ 3426.935709] loop_configure+0x1118/0x1410 [ 3426.936191] lo_ioctl+0xa57/0x16b0 [ 3426.936622] ? avc_has_extended_perms+0x7f1/0xf40 [ 3426.937288] ? loop_set_status_old+0x250/0x250 [ 3426.937933] ? avc_ss_reset+0x180/0x180 [ 3426.938607] ? find_held_lock+0x2c/0x110 [ 3426.939082] ? __lock_acquire+0xbb1/0x5b00 [ 3426.939647] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3426.940366] ? generic_block_fiemap+0x60/0x60 [ 3426.940881] ? lock_downgrade+0x6d0/0x6d0 [ 3426.941352] ? build_open_flags+0x6f0/0x6f0 [ 3426.941848] ? loop_set_status_old+0x250/0x250 [ 3426.942407] blkdev_ioctl+0x291/0x710 [ 3426.942949] ? blkdev_common_ioctl+0x1930/0x1930 [ 3426.943619] ? selinux_file_ioctl+0xb6/0x270 [ 3426.944326] block_ioctl+0xf9/0x140 [ 3426.944744] ? blkdev_read_iter+0x1c0/0x1c0 [ 3426.945256] __x64_sys_ioctl+0x19a/0x210 [ 3426.945843] do_syscall_64+0x33/0x40 [ 3426.946273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3426.946938] RIP: 0033:0x7fcd90ea58d7 [ 3426.947416] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3426.950010] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3426.950891] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3426.951708] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3426.952683] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3426.953744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3426.954667] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 17:34:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x12, 0x0, &(0x7f0000000c80)=0x10000000) [ 3427.005890] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities 17:34:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000600)={0x6, 'netpci0\x00', {}, 0x80}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x40, 0x2) rename(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000080)='mnt/encrypted_dir\x00') r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000500)}, 0x50008, 0x0, 0x1fe, 0x8, 0x4, 0xfffffffb, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, 'mnt/encrypted_dir\x00'}) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x1}}, 'mnt/encrypted_dir\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@nodevmap}, {@version_u}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=@nfc}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) [ 3427.045313] FAULT_INJECTION: forcing a failure. [ 3427.045313] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.046727] CPU: 1 PID: 16474 Comm: syz-executor.4 Tainted: G W 5.10.260 #1 [ 3427.047680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3427.048648] Call Trace: [ 3427.048956] dump_stack+0x107/0x167 [ 3427.049374] should_fail.cold+0x5/0xa [ 3427.049816] ? ptlock_alloc+0x1d/0x70 [ 3427.050252] should_failslab+0x5/0x20 [ 3427.050687] kmem_cache_alloc+0x5b/0x310 [ 3427.051154] ptlock_alloc+0x1d/0x70 [ 3427.051574] pte_alloc_one+0x68/0x1a0 [ 3427.052014] __pte_alloc+0x1d/0x330 [ 3427.052438] remap_pfn_range_internal+0x9a3/0xf60 [ 3427.052997] ? lookup_memtype+0x5b/0x200 [ 3427.053472] ? apply_to_existing_page_range+0x40/0x40 [ 3427.054064] remap_pfn_range+0xcd/0x160 [ 3427.054521] ? remap_pfn_range_notrack+0x70/0x70 [ 3427.055064] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3427.055656] io_uring_mmap+0x398/0x530 [ 3427.056104] mmap_file+0x5e/0xe0 [ 3427.056495] mmap_region+0xc4d/0x1500 [ 3427.056936] do_mmap+0x868/0x1370 [ 3427.057336] vm_mmap_pgoff+0x198/0x1f0 [ 3427.057784] ? randomize_page+0xb0/0xb0 [ 3427.058246] ksys_mmap_pgoff+0x41c/0x560 [ 3427.058712] ? find_mergeable_anon_vma+0x250/0x250 [ 3427.059279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3427.059883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3427.060486] do_syscall_64+0x33/0x40 [ 3427.060910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3427.061499] RIP: 0033:0x7f15cb12cb62 [ 3427.061927] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3427.064035] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3427.064911] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3427.065729] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3427.066546] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3427.067362] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3427.068178] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 17:34:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000030930020000000d2f4655fd2f4655f0100ffff53ef010001000000d00000000000006c2c00000001000c00000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 52) [ 3427.150616] loop5: detected capacity change from 0 to 2048 [ 3427.152599] FAULT_INJECTION: forcing a failure. [ 3427.152599] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.155682] CPU: 0 PID: 16481 Comm: syz-executor.5 Tainted: G W 5.10.260 #1 [ 3427.157907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3427.160150] Call Trace: [ 3427.160879] dump_stack+0x107/0x167 [ 3427.161867] should_fail.cold+0x5/0xa [ 3427.162903] ? create_object.isra.0+0x3a/0xa30 [ 3427.164131] should_failslab+0x5/0x20 [ 3427.165159] kmem_cache_alloc+0x5b/0x310 [ 3427.166256] ? find_held_lock+0x2c/0x110 [ 3427.167370] create_object.isra.0+0x3a/0xa30 17:34:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x60ff) [ 3427.168556] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3427.170077] kmem_cache_alloc+0x159/0x310 [ 3427.171233] skb_clone+0x14f/0x3d0 [ 3427.172218] netlink_broadcast_filtered+0xa03/0xfb0 [ 3427.173605] ? __alloc_skb+0x388/0x5b0 [ 3427.174657] netlink_broadcast+0x35/0x50 [ 3427.175762] kobject_uevent_env+0x93d/0xfd0 [ 3427.176947] ? blk_queue_flag_set+0x22/0x30 [ 3427.178273] ? __loop_update_dio+0x2d2/0x690 [ 3427.178314] loop_configure+0x1118/0x1410 [ 3427.178366] lo_ioctl+0xa57/0x16b0 [ 3427.178401] ? avc_has_extended_perms+0x7f1/0xf40 [ 3427.178439] ? loop_set_status_old+0x250/0x250 17:34:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x12, 0x0, &(0x7f0000000040)=0x38) 17:34:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xa0000) [ 3427.178476] ? avc_ss_reset+0x180/0x180 [ 3427.178510] ? find_held_lock+0x2c/0x110 [ 3427.178562] ? __lock_acquire+0xbb1/0x5b00 [ 3427.178672] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3427.178704] ? generic_block_fiemap+0x60/0x60 [ 3427.178732] ? lock_downgrade+0x6d0/0x6d0 [ 3427.178760] ? build_open_flags+0x6f0/0x6f0 [ 3427.178801] ? loop_set_status_old+0x250/0x250 [ 3427.178827] blkdev_ioctl+0x291/0x710 [ 3427.178859] ? blkdev_common_ioctl+0x1930/0x1930 17:34:28 executing program 7: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x401823fc, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) [ 3427.178896] ? selinux_file_ioctl+0xb6/0x270 [ 3427.178935] block_ioctl+0xf9/0x140 [ 3427.178960] ? blkdev_read_iter+0x1c0/0x1c0 [ 3427.178992] __x64_sys_ioctl+0x19a/0x210 [ 3427.179027] do_syscall_64+0x33/0x40 [ 3427.179059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 17:34:28 executing program 4: syz_io_uring_setup(0x583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f0000000100)) (fail_nth: 86) [ 3427.179077] RIP: 0033:0x7fcd90ea58d7 [ 3427.179104] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.179121] RSP: 002b:00007fcd8e41af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3427.179152] RAX: ffffffffffffffda RBX: 00007fcd90eef970 RCX: 00007fcd90ea58d7 [ 3427.179170] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 3427.179188] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 3427.179205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3427.179222] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 3427.179385] 9pnet: Insufficient options for proto=fd [ 3427.236913] 9pnet: Insufficient options for proto=fd [ 3427.311899] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 3427.450442] FAULT_INJECTION: forcing a failure. [ 3427.450442] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.453522] CPU: 0 PID: 16506 Comm: syz-executor.4 Tainted: G W 5.10.260 #1 [ 3427.455592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3427.457615] Call Trace: [ 3427.458271] dump_stack+0x107/0x167 [ 3427.459161] should_fail.cold+0x5/0xa [ 3427.460094] ? create_object.isra.0+0x3a/0xa30 [ 3427.461209] should_failslab+0x5/0x20 [ 3427.462145] kmem_cache_alloc+0x5b/0x310 [ 3427.463136] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3427.464613] create_object.isra.0+0x3a/0xa30 [ 3427.465686] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3427.466924] kmem_cache_alloc+0x159/0x310 [ 3427.467936] ptlock_alloc+0x1d/0x70 [ 3427.468823] pte_alloc_one+0x68/0x1a0 [ 3427.469740] __pte_alloc+0x1d/0x330 [ 3427.470622] remap_pfn_range_internal+0x9a3/0xf60 [ 3427.471795] ? lookup_memtype+0x5b/0x200 [ 3427.472797] ? apply_to_existing_page_range+0x40/0x40 [ 3427.474050] remap_pfn_range+0xcd/0x160 [ 3427.475011] ? remap_pfn_range_notrack+0x70/0x70 [ 3427.476157] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3427.477410] io_uring_mmap+0x398/0x530 [ 3427.478353] mmap_file+0x5e/0xe0 [ 3427.479166] mmap_region+0xc4d/0x1500 [ 3427.480095] do_mmap+0x868/0x1370 [ 3427.480944] vm_mmap_pgoff+0x198/0x1f0 [ 3427.481889] ? randomize_page+0xb0/0xb0 [ 3427.482860] ksys_mmap_pgoff+0x41c/0x560 [ 3427.483836] ? find_mergeable_anon_vma+0x250/0x250 [ 3427.485024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3427.486289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3427.487532] do_syscall_64+0x33/0x40 [ 3427.488447] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3427.489691] RIP: 0033:0x7f15cb12cb62 [ 3427.490594] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3427.495070] RSP: 002b:00007f15c86a20f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3427.496887] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f15cb12cb62 [ 3427.498579] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffd000 [ 3427.500284] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 3427.502000] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 3427.503749] R13: 0000000020ffc000 R14: 0000000020000680 R15: 0000000020ffd000 VM DIAGNOSIS: 17:34:27 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff822ea221 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff88804a7e72e8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff879fa258 R14=0000000000000001 R15=ffffffff879fa250 RIP=ffffffff822ea278 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f15c86a2700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001d80 CR3=0000000044fba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f15cb2137c000007f15cb2137c8 XMM02=00007f15cb2137e000007f15cb2137c0 XMM03=00007f15cb2137c800007f15cb2137c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff110087bc07f RBX=ffff888043de03c8 RCX=ffffffff81281761 RDX=dffffc0000000000 RSI=ffff8880478fb200 RDI=ffff888043de03f8 RBP=ffff8880201d3b00 RSP=ffff88800ff17cc0 R8 =0000000000000246 R9 =0000000000000003 R10=ffffed1001fe2f86 R11=0000000000000001 R12=ffff88801d1f7158 R13=ffff8880201d3b48 R14=ffff8880201d3b50 R15=ffff8880478fa200 RIP=ffffffff816fb75e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5b0d99f8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005644d02d6000 CR3=000000000d616000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=0000000000000000000035706f6f6c2f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005644d02b5a6000005644d02b5a40 XMM06=00005644d02ab410ffffffff00000002 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000