:0:0: [sr0] tag#0 unaligned transfer [ 3086.511591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.511674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.511868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.512047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.512222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.512410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.512640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.512826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.513007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.513183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.513321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.514021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.545688] loop5: detected capacity change from 0 to 135266304 [ 3086.555589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.665005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.668755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.670659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.671691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.672689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.673711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.674715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.675705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.676735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.678656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.679858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.681024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.683337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.684377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.685405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.686625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.688824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.689712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.690643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.691535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.692379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.693171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.693981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.695102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.695929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.696891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.697938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.698838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.700873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.701783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.702760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.703656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.704571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.705835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.707853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.709564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.711101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.712698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.714339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.715827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.717554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.719192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.720266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.721298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.722352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.723359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.724380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.725434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.727265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.728474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.729350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.730276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.731180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.732129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.733036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.733954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.734868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.735747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.736622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.737393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.738179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.739029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.739869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.741474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.742233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.743102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.743941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.744716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.745491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.746247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.747024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.747862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.748832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.749769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.750677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.751579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.752508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.753383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.754273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.755165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.756111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.756957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.757753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.758557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.759336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.760123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.760920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.761716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.762529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.763286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.764103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.764906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.765696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.766489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.767245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.768064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.768992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.769902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.770758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.771660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.772520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.773286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.774381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.775344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.776193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.777232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.778037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.778931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.779719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.782064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.782880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.783667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.784476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.785235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.786049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.786883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.787699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.788800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.789644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.790403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.791317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.792261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.793093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.793999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.794863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.795721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.796613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.797377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.798235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.799049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.799901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.800846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.801768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.802713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.803641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.804582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.805467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.806345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.807235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.808124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.808943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.809843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.810659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.811572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.812384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.813240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.814054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.814975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.815793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.816604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.817362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.818194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.819023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.819863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.820717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.821588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.822345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.823191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.824026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.824836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.825591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.826366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.828212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.829037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.830357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.831169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.850455] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 3086.851712] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 3086.852763] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 3086.853771] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 3086.855242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.857016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.858929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.861076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.862665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.864316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.865989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.867654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.869558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.871029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.872642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.874184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.875723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.877551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.879027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.880662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.882575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.884328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.886090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.887639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.889112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.890778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.892316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.894052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.895677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.897070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.898130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.899670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.901196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.902586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.904152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.905672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.907186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.908219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.909135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.909948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.910773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.911585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.913358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.914906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.916388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.917789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.919398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.921039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.922603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.923801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.924826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.925877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.926771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.927664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.928902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.933144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.934977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.936831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.939015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.940872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.942707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.944618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.946889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.947807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.948717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.949874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.950776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.952076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.953050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.954780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.956676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.958632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.960585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.962394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.964305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.966124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.967973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.969809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.971616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.973362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.975102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.977005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.978794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.980525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.982278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.984114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.985942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.987690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.989528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.992211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.993954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.995810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.997812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3086.999564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.001412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.003171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.004997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.006757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.008594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.010397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.012088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.014363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.015667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.016590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.018070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.018978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.020131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.021023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.022055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.023144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.025027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.026984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.028844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.030693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.034836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.036824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.039010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.040811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.042037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.042963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.044102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.045019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.046172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.047308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.048592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.050403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.052273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.054212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.056511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.058285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.060011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.061842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.063589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.065381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.066892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.067824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.068728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.069629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.070795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.071714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.073036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.074092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.075876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.077848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.079473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.081244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.083035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.084771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.086361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.087901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.089276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.090207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.091364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.092280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.093327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.094255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.095219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.096274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.097897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.099580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.100686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.101790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.102891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.103856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.105687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.106768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.108134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.109071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.110286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.111387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.112402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.113350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.114342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.115405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.116485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.117590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.118639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.119658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.120713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.121742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.122782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.123781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.124696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.125630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.126571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.127500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.128395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.129349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.130298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.131325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.132283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.133226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.135098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.136148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.137089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.138031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.139096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.140918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.142879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.144609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.146367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.148112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.149856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.151583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.153339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.155176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.157124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.158979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.160754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.162550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.164365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.166179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.167860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.169720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.171674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.173595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.175410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.177385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.179219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.181063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.182877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.184718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.185718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.187344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.188317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.189599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.190682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.191625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.192610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.193659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.195585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.197464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.199147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.200874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.202678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.203685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.205479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.207254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.209014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.210747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.212523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.214367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.216241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.217310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.218718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.220050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.221075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.222124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.223214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.224281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.225392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.227125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.228959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.230641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.232619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.233656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.234693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.237206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.239789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.240909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.242743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.244722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.246761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.248614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.250395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.252217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.254027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.255846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.257674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.259578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.261554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.263316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.265047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.266793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.268542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.270274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.272013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.273770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.275574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.277325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.279203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.280972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.282691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.284491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.286233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.287963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.289824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.291733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.293253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.294333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.295943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.297086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.298226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.299288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.300784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.301824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.302874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.303922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.304979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.306039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.307094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.308158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.309263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.310325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.311371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.312481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.313588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.314625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.315666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.316716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.317830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.318875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.319933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.320975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.322013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.323080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.324140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.325186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.328699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.329795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.330888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.332458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.333596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.334684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.335869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.336963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.338086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.341386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.342564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.343661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.344958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.346083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.347182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.348338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.349625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.350704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.351796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.352889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.354061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.355151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.356736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.357819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.358953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.360092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.361215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.362341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.363455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.364566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.365638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.366802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.367950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.369053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.370148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.371323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.372584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.373663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.374751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.375853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.376994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.378070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.379175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.380283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.381383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.382672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.383731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.384817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.385955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.387023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.388121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.389237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.390363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.391485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.392592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.393656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.394764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.395678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.396613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.397561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.398665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.399690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.400779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3087.401707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3102.968775] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3102.975062] FAULT_INJECTION: forcing a failure. 10:59:02 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 9) 10:59:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x7ff) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x23) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x85) syz_io_uring_complete(0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x80}) perf_event_open(0x0, 0x0, 0x0, r2, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 10:59:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:02 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3f}, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="c102a0f56566d705731ee7e0fabb46fe327362951bd6942b94fb8764f404949b8c386cc951797dca0b12746eb2d31202473052530901899ea8186f242facb15e40a41fc49cb7416ea9d16c43b9b85f7f351ff9e3c685db53e7f71cd6800a8290b335cd93dd82e58e88761c09887cf6d38331e3e287fecfb20ce8010ab3604212f7ce30225332716d4e9e0d6176900fadd0fea848245a8919097a3400000000000001000000000000"]) syz_io_uring_setup(0x7935, &(0x7f0000000180)={0x0, 0x1eb1, 0x1, 0x1, 0x237}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000340)) r2 = syz_io_uring_setup(0x3ca3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000006c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=@nl=@unspec, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/144, 0x90}], 0x2, &(0x7f0000000580)=""/241, 0xf1}, 0x0, 0x0, 0x1, {0x2, r5}}, 0x4) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=0x7, 0x8, 0x3) [ 3102.975062] name failslab, interval 1, probability 0, space 0, times 0 [ 3102.976525] CPU: 1 PID: 16432 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3102.977397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3102.978438] Call Trace: [ 3102.978803] dump_stack+0x107/0x167 [ 3102.979293] should_fail.cold+0x5/0xa [ 3102.979810] ? create_object.isra.0+0x3a/0xa20 [ 3102.985113] should_failslab+0x5/0x20 [ 3102.986081] kmem_cache_alloc+0x5b/0x310 [ 3102.987129] create_object.isra.0+0x3a/0xa20 [ 3102.988114] kmemleak_alloc_percpu+0xa0/0x100 [ 3102.988687] pcpu_alloc+0x4e2/0x1240 [ 3102.989180] ? io_tctx_exit_cb+0xf0/0xf0 [ 3102.989693] percpu_ref_init+0x31/0x3d0 [ 3102.990243] io_uring_setup+0x47a/0x2980 [ 3102.990759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3102.991370] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3102.996073] ? wait_for_completion_io+0x270/0x270 [ 3102.996703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3102.997364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3102.998049] do_syscall_64+0x33/0x40 [ 3102.998518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3102.999206] RIP: 0033:0x7fe147fe7b19 [ 3102.999681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3103.002041] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3103.002999] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3103.003933] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3103.004846] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3103.005772] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3103.006671] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3103.034258] 9pnet_virtio: no channels available for device 127.0.0.1 10:59:02 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 10:59:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(r1, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3103.040592] loop5: detected capacity change from 0 to 135266304 10:59:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3103.068150] loop3: detected capacity change from 0 to 135266304 10:59:02 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 10) [ 3103.095315] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3103.109277] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 3103.110595] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 3103.111510] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 3103.112394] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 3103.113367] print_req_error: 732 callbacks suppressed [ 3103.113381] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 10:59:02 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 10:59:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3103.150183] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 3103.151611] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 3103.152665] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 3103.153619] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 3103.154711] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 3103.156148] buffer_io_error: 806 callbacks suppressed [ 3103.156157] Buffer I/O error on dev sr0, logical block 0, async page read [ 3103.157847] Buffer I/O error on dev sr0, logical block 1, async page read [ 3103.158866] Buffer I/O error on dev sr0, logical block 2, async page read [ 3103.159841] Buffer I/O error on dev sr0, logical block 3, async page read [ 3103.160780] Buffer I/O error on dev sr0, logical block 4, async page read [ 3103.161730] Buffer I/O error on dev sr0, logical block 5, async page read [ 3103.162633] Buffer I/O error on dev sr0, logical block 6, async page read [ 3103.163565] Buffer I/O error on dev sr0, logical block 7, async page read [ 3103.174793] loop3: detected capacity change from 0 to 135266304 [ 3103.203833] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3103.213629] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 3103.214193] FAULT_INJECTION: forcing a failure. [ 3103.214193] name failslab, interval 1, probability 0, space 0, times 0 [ 3103.214910] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 3103.216329] CPU: 1 PID: 16461 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3103.217209] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 3103.218028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3103.218034] Call Trace: [ 3103.218059] dump_stack+0x107/0x167 [ 3103.218921] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 3103.219935] should_fail.cold+0x5/0xa [ 3103.219958] ? percpu_ref_init+0xd8/0x3d0 [ 3103.220293] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 3103.220741] should_failslab+0x5/0x20 [ 3103.220762] kmem_cache_alloc_trace+0x55/0x320 [ 3103.221726] Buffer I/O error on dev sr0, logical block 0, async page read [ 3103.222189] ? io_tctx_exit_cb+0xf0/0xf0 [ 3103.222747] Buffer I/O error on dev sr0, logical block 1, async page read [ 3103.223972] percpu_ref_init+0xd8/0x3d0 [ 3103.223993] io_uring_setup+0x47a/0x2980 [ 3103.228401] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3103.229016] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3103.229678] ? wait_for_completion_io+0x270/0x270 [ 3103.230303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3103.230974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3103.231628] do_syscall_64+0x33/0x40 [ 3103.232118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3103.232792] RIP: 0033:0x7fe147fe7b19 [ 3103.233277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3103.235610] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3103.236591] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3103.237490] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3103.238424] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3103.239346] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3103.240309] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3103.272549] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 3103.274134] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 3103.275016] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 3103.275887] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 3103.276920] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 3103.326892] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 3103.328546] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 3103.329404] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 3103.330264] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 3103.331251] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 3103.362251] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 3103.363693] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 3103.364621] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 3103.365483] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 3103.366476] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 3103.368088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.368828] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3103.370239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.371015] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3103.372595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.373277] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3103.374679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.375364] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3103.376811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.377616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.378373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.379231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.380204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.381051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.381888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.382702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.383515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.384299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.385162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.385961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.386970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.387936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.389753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.391648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.392576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.393327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.394197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.394979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.395755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.396640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.397482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.398330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.399159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.399998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.401080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.402193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.403287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.404384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.405690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.406810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.408749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.409827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.411687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.412746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.413795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.414835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.416882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.418090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.419192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.420252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.421411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.422527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.423589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.424631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.425689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.426807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.427878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.428945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.430032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.431073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.432144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.433240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.434336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.435502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.436574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.437665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.438756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.439851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.440940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.442049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.443102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.444195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.445280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.446309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.447358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.448445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.449508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.450569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.451680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.452846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.454643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.457079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.458208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.459338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.460484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.461611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.462734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.463866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.464993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.466114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.467216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.468355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.469485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.470611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.471738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.472849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.473976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.475128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.476238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.477364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.478493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.479602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.480375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.481211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.482031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.482987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.483929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.485159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.486070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.487042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.487969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.489187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.490462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.491579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.492646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.493783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.494893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.495976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.497056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.498146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.499324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.500511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.501629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.502751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.503888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.505048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.506127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.507227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.508345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.509543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.510666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.511774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.512912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.514016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.515121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.516244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.517330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.520303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.522188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.523642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.524830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.526059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.527238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.528386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.529386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.530367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.531205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.532127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.533044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.533931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.534834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.535766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.536679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.537633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.538576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.539729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.540640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.541685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.542608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.543534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.544624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.545640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.546649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.547628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.548654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.549669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.550705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.551708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.552707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.553770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.554775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.555740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.556744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.557677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.558662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.559642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.560612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.561513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.562346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.563622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.564481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.565287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.566819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.567788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.568606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.569620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.570589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.571419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.572372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.573310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.574249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.575168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.576125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.577136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.578462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.579402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.580701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.581660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.582822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.583749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.584762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.585722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.586678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.587540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.588405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.589253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.590137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.590995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.591925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.592984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.593957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.595814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.597018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.597981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.599127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.600106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.601229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.602227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.603209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.604188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.605140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.606103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.607062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.608004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.608993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.609897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.611132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.612004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.612893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.613999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.614891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.615832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.616769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.617924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.622363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.623664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.625640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.628052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.630380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.632997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.635205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.637308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.639353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.641542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.643622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.645677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.647779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.649777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.651821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.653902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.655982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.658010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.660121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.662174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.664269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.666093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.667909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.669725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.672292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.673240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.674791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.675691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.676637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.677565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.678558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.680037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.681888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.683976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.685818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.687767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.689512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.691471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.692532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.694275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.696060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.697846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.699625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.701462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.703196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.705091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.706949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.708873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.710762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.712647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.714570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.716586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.718592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.720722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.722532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.726355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.728093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.730180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.731951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.733761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.735578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.737411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.739188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.740921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.742649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.744498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.746246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.748031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.749912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.751857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.754127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.755980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.757850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.759047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.760193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.761381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.762720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.763843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.764978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.766098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.767280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.768506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.769598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.770715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.771844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.772987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.774135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.775250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.776745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.777967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.779218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.780605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.781954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.784038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.785949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.788019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.789836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.791727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.793635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.795536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.797315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.799139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.800929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.802752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.808487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.809258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.810090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.810944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.811792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.812650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.813476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.814242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.815174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.816033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.816883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.817702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.818582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.819333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.820166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.821010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.821938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.822941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.823933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.824858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.826689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.827535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.828365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.829157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.830103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.830896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.831826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.832688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.833522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.834281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.835104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.835975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.836799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.837810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.838751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.839638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.840583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.841505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.842377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.843251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.844213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.845147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.846033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.846876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.847700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.848560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.849342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.850173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.850986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.851795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.852745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.853845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.854788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.855905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.856896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.857910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.858892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.859816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.860793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.861774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.862566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.863348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.864395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.865199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.866098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.866953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.867973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.868932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.870154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.871072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.872071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.873044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.874015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.874954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.875865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.876930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.877725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.878966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.879935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.881116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.882039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.883017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.883995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.884952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.885902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.886868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.887656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.888498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.889265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.890265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.891117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.891994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.892837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.893690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.894519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.895323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.896241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.897148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.898004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.898824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.899669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.901278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.902113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.903097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.904143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.904959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.905798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.906695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.907498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.908608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.909542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.910515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.911411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.912595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.913565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.914608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.915712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.916666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.917450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.918279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.919091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.919971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.920882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.921730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.922565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.923416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.924329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.925162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.926025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.926893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.929918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.930730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.931685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.933022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.933937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.934824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.935683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.936592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.937348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.938214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.939039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.940006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.940853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.941668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.942417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.943613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.944535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.945302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.946257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.947048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.948090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.948932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.949773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.950717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.951914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.952900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.954260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.955286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.956344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.957316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.958395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.959354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.960383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.961180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.962291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.963122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.964073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.964941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.965782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.966770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.967728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.968923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.969847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.970789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.971845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.972788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.973673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.974609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.975369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.976340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.977282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.978119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.978960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.979799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.980702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.981877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.982777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.983621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.984502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.985328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.986186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.986971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.987804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.988717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.989561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.990332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.991212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.992115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.993164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.993978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.994829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.996014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.996959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.997889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.998939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3103.999984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.001076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.002154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.003033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.004023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.004929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.005791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.006644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.007562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.008376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.009243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.010108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.011097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.011983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.012915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.013775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.014635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.015394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.016332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.017150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.018116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.018941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.019814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.020705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.021585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.022362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.023189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.024098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.025009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.025839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.026698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.027586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.028480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.029305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.031768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.032816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.033772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.034946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.035835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.036862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.037735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.038553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.039310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.040175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.041055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.041895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.042731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.043651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.044653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.045612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.046448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.047233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.048111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.048973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.049827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.050735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.051672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.052663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.053988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.054945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.055907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.056877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.057785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.058931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.059751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.060620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.061374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.062229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.063083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.063913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.064804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.065692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.066555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.067318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.068219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.069047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.069910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.070728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.071630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.072653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.073795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.074690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.075610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.076563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.077597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.078568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.079497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.080463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.081288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.082449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.083239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.084364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.085241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.086112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.086962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.088086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.089308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.090231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.091322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.092243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.093210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.094223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.095170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.096122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.097267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.098118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.099204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.100075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.100979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.101797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.102688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.103753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.105030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.106083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.107173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.108074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.108993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.109967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.110891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.111883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.112833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.113997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.114831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.115784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.116662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.117515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.118332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.119320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.120278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.121369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.122245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.123399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.124344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.125271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.126160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.127081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.127920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.128771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.129581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.130391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.131212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.132102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.133750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.135102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.136131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.137297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.138341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.139617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.140675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.141756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.142637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.143672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.144656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.145590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.146571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.147378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.148319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.149217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.150083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.151022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.151882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.152846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.153723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.154636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.155561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.156486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.157366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.158321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.159230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.160167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.161135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.162034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.162896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.163774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.164669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.165685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.166729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.167681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.168620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.169680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.170664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.171594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.172719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.173811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.174755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.175668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.176721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.177786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.178717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.179648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.180712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.181818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.182875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.183812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.184735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.185737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.186722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.187672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.188790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.189900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.190947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.191888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.192838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.193760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.194706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.195690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.196677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.198898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.199949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.200913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.201845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.202944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.203850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.204825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.205763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.206725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.207768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.208877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.210633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.211631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.212716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.213759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.214720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.215782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.217142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.218069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.218967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.220371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.221299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.222244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.223302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.224797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.225767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.226707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.227678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.228723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.229943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.230877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.231808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.232932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.234214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.236070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.237005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.237945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.239335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.240339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.241311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.242303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.243653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.244706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.245647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.246625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.247646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.248948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3104.249777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:59:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x7ff) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x23) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x85) syz_io_uring_complete(0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x80}) perf_event_open(0x0, 0x0, 0x0, r2, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 10:59:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:19 executing program 6: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 10:59:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 10:59:19 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 11) 10:59:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3119.985843] loop5: detected capacity change from 0 to 135266304 [ 3119.993348] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3119.994715] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3120.001904] FAULT_INJECTION: forcing a failure. [ 3120.001904] name failslab, interval 1, probability 0, space 0, times 0 [ 3120.003420] CPU: 0 PID: 16492 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3120.004322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3120.005381] Call Trace: [ 3120.005724] dump_stack+0x107/0x167 [ 3120.006201] should_fail.cold+0x5/0xa [ 3120.006695] ? create_object.isra.0+0x3a/0xa20 [ 3120.007287] should_failslab+0x5/0x20 [ 3120.007778] kmem_cache_alloc+0x5b/0x310 [ 3120.008323] create_object.isra.0+0x3a/0xa20 [ 3120.008890] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3120.009547] kmem_cache_alloc_trace+0x151/0x320 [ 3120.010147] ? io_tctx_exit_cb+0xf0/0xf0 [ 3120.010672] percpu_ref_init+0xd8/0x3d0 [ 3120.011186] io_uring_setup+0x47a/0x2980 [ 3120.011707] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3120.012356] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3120.013005] ? wait_for_completion_io+0x270/0x270 [ 3120.013643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3120.014319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3120.014984] do_syscall_64+0x33/0x40 [ 3120.015464] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3120.016129] RIP: 0033:0x7fe147fe7b19 [ 3120.016608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3120.018971] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3120.019949] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3120.020882] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3120.021791] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3120.022714] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3120.023631] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3120.038856] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3120.072004] loop3: detected capacity change from 0 to 135266304 10:59:19 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 12) 10:59:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3120.136152] 9pnet_virtio: no channels available for device 127.0.0.1 10:59:19 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x480a8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x136080, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="05be25977472616e733d756e69782c6163636573733d757365722c6c6f6f73652c63616368653d6673636f6e3d3970323030302c70726976706f72742c667363616368652c736d61636b66736861743d3970002c726f6f74636f6e746578743d73746166665f752c00"/115]) mount$bind(&(0x7f0000000280)='./file1\x00', &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x9, 0x2) 10:59:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3120.195295] FAULT_INJECTION: forcing a failure. [ 3120.195295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3120.196990] CPU: 1 PID: 16504 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3120.197948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3120.199044] Call Trace: [ 3120.199410] dump_stack+0x107/0x167 [ 3120.199980] should_fail.cold+0x5/0xa [ 3120.200505] __alloc_pages_nodemask+0x182/0x600 [ 3120.201159] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3120.201988] ? cap_capable+0x1cd/0x230 [ 3120.202489] alloc_pages_current+0x187/0x280 [ 3120.203106] __get_free_pages+0xc/0xa0 [ 3120.203607] io_uring_setup+0xe27/0x2980 [ 3120.204226] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3120.204962] ? wait_for_completion_io+0x270/0x270 [ 3120.205594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3120.206322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3120.209712] do_syscall_64+0x33/0x40 [ 3120.210293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3120.211191] RIP: 0033:0x7fe147fe7b19 [ 3120.211670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3120.214187] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3120.215214] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 10:59:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3120.216190] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3120.216200] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3120.216209] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3120.216219] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 10:59:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 10:59:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3120.272802] loop5: detected capacity change from 0 to 135266304 [ 3120.298985] 9pnet_virtio: no channels available for device ./file1 [ 3120.349877] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3120.357223] FAULT_INJECTION: forcing a failure. [ 3120.357223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3120.358780] CPU: 0 PID: 16525 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3120.359672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3120.360748] Call Trace: [ 3120.361096] dump_stack+0x107/0x167 [ 3120.361569] should_fail.cold+0x5/0xa [ 3120.362068] __alloc_pages_nodemask+0x182/0x600 [ 3120.362693] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3120.363476] ? cap_capable+0x1cd/0x230 [ 3120.363996] alloc_pages_current+0x187/0x280 [ 3120.364584] __get_free_pages+0xc/0xa0 [ 3120.365092] io_uring_setup+0xf9a/0x2980 [ 3120.365625] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3120.366287] ? wait_for_completion_io+0x270/0x270 [ 3120.366930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3120.367611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3120.368296] do_syscall_64+0x33/0x40 [ 3120.368788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3120.369451] RIP: 0033:0x7fe147fe7b19 [ 3120.369948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3120.372334] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3120.373316] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3120.374241] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3120.375162] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3120.376092] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3120.377026] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3120.378743] 9pnet_virtio: no channels available for device ./file1 10:59:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:19 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 13) 10:59:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3120.405798] loop3: detected capacity change from 0 to 135266304 10:59:35 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:35 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:35 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 10:59:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:35 executing program 6: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="58f17dc6f0095960b1fe01846e628251d708811f452046b1d811c7f929d9d29b3609a50388bdfc3daa8e44170d3ec4e7077d19fc81b7943698e80ea8dc48bdf0da52624365b8d0de545d08ac1e85b4ff7f000000000000df755f8103ab5755bed1b2a18a014efdd02daf6951"]) 10:59:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:35 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:35 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 14) [ 3136.200863] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3136.213307] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3136.222747] 9pnet_virtio: no channels available for device 127.0.0.1 10:59:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3136.231259] FAULT_INJECTION: forcing a failure. [ 3136.231259] name failslab, interval 1, probability 0, space 0, times 0 [ 3136.236770] CPU: 1 PID: 16555 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3136.237655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3136.238710] Call Trace: [ 3136.239054] dump_stack+0x107/0x167 [ 3136.239524] should_fail.cold+0x5/0xa [ 3136.240016] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 3136.240761] should_failslab+0x5/0x20 [ 3136.241251] kmem_cache_alloc_trace+0x55/0x320 [ 3136.241842] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 3136.242536] io_uring_setup+0x14f6/0x2980 [ 3136.243073] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3136.243722] ? wait_for_completion_io+0x270/0x270 [ 3136.244363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3136.245048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3136.245712] do_syscall_64+0x33/0x40 [ 3136.246191] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3136.246848] RIP: 0033:0x7fe147fe7b19 10:59:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:35 executing program 6: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) mknodat$null(r0, &(0x7f0000000040)='./file1\x00', 0x8000, 0x103) [ 3136.247327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3136.256766] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3136.257743] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3136.258655] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3136.259568] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3136.264493] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3136.265402] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3136.266924] loop5: detected capacity change from 0 to 135266304 [ 3136.268754] loop3: detected capacity change from 0 to 135266304 [ 3136.314112] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3136.339820] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3151.981260] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3151.993727] FAULT_INJECTION: forcing a failure. [ 3151.993727] name failslab, interval 1, probability 0, space 0, times 0 [ 3152.001589] CPU: 1 PID: 16583 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3152.002506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3152.003550] Call Trace: [ 3152.003901] dump_stack+0x107/0x167 [ 3152.004397] should_fail.cold+0x5/0xa [ 3152.004899] ? create_object.isra.0+0x3a/0xa20 [ 3152.005518] should_failslab+0x5/0x20 [ 3152.006003] kmem_cache_alloc+0x5b/0x310 [ 3152.006520] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3152.007314] create_object.isra.0+0x3a/0xa20 [ 3152.007867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3152.008577] kmem_cache_alloc_trace+0x151/0x320 [ 3152.009173] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 3152.009861] io_uring_setup+0x14f6/0x2980 [ 3152.010421] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3152.011058] ? wait_for_completion_io+0x270/0x270 [ 3152.011732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3152.012397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3152.013078] do_syscall_64+0x33/0x40 [ 3152.013578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3152.014242] RIP: 0033:0x7fe147fe7b19 [ 3152.014740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3152.017128] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3152.018093] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3152.019014] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3152.019961] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3152.020902] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3152.021834] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3152.033796] 9pnet_virtio: no channels available for device 127.0.0.1 10:59:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB, @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:51 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 15) 10:59:51 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x48, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 10:59:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:51 executing program 6: ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000100)) r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0]) [ 3152.036208] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3152.063291] loop3: detected capacity change from 0 to 135266304 [ 3152.071368] loop5: detected capacity change from 0 to 135266304 10:59:51 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x802000, &(0x7f0000000180)=ANY=[@ANYBLOB="fe521f94ce136500000000000000000dde0441aa177bde634a289c8700bdf5a1176bae4aa27f18875996fa0e680ae572d65409d85c45c38bde048e31ee6b70f85c"]) 10:59:51 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:51 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 10:59:51 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 16) 10:59:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB, @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 10:59:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3152.212791] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3152.220535] FAULT_INJECTION: forcing a failure. [ 3152.220535] name failslab, interval 1, probability 0, space 0, times 0 [ 3152.222476] CPU: 1 PID: 16617 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3152.223364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3152.224425] Call Trace: [ 3152.224785] dump_stack+0x107/0x167 [ 3152.225250] should_fail.cold+0x5/0xa [ 3152.225747] ? create_object.isra.0+0x3a/0xa20 [ 3152.226336] should_failslab+0x5/0x20 [ 3152.226824] kmem_cache_alloc+0x5b/0x310 [ 3152.227348] create_object.isra.0+0x3a/0xa20 [ 3152.227940] kmemleak_alloc_percpu+0xa0/0x100 [ 3152.228524] pcpu_alloc+0x4e2/0x1240 [ 3152.229021] ? io_async_queue_proc+0x80/0x80 [ 3152.229586] percpu_ref_init+0x31/0x3d0 [ 3152.230097] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3152.230790] io_uring_setup+0x14f6/0x2980 [ 3152.231322] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3152.231973] ? wait_for_completion_io+0x270/0x270 [ 3152.236623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3152.236638] ? syscall_enter_from_user_mode+0x1d/0x50 10:59:51 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 10:59:51 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xba, 0x3a, 0x0, 0x1224084, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x2c000, 0x0) openat(r0, &(0x7f00000002c0)='./file1\x00', 0x408c03, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="eb25662c9ac8a9767f70321fde490b6b8c35c92bd5f262794f00f6180216904fbb7b58c3b8276bb7f1bda20e3c9d5c578e0b25cdc06616ad8eaed2c31bbc7fa786355589f7e920d8c6e80800000000000000f4544fe32e684853132f1bbcdf89c0bec657"]) setxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=@known='user.incfs.size\x00', &(0x7f0000000140)='$\'I]-:!\x00', 0x8, 0x2) umount2(&(0x7f0000000200)='./file1\x00', 0xa) 10:59:51 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3152.236653] do_syscall_64+0x33/0x40 [ 3152.236667] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3152.236676] RIP: 0033:0x7fe147fe7b19 [ 3152.236690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3152.236698] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3152.236713] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3152.236721] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3152.236729] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3152.236737] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3152.236745] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3152.306319] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3152.320669] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3152.320733] loop3: detected capacity change from 0 to 135266304 10:59:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 10:59:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3152.343698] loop5: detected capacity change from 0 to 135266304 10:59:51 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:07 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 17) 11:00:07 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:07 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:07 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:00:07 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x3) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5312, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x8, 0x0) 11:00:07 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB, @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:07 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3168.653808] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3168.665717] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3168.668847] FAULT_INJECTION: forcing a failure. [ 3168.668847] name failslab, interval 1, probability 0, space 0, times 0 [ 3168.670415] CPU: 1 PID: 16670 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3168.671310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3168.672374] Call Trace: [ 3168.676759] dump_stack+0x107/0x167 [ 3168.677244] should_fail.cold+0x5/0xa [ 3168.677753] ? create_object.isra.0+0x3a/0xa20 [ 3168.678365] should_failslab+0x5/0x20 [ 3168.678872] kmem_cache_alloc+0x5b/0x310 [ 3168.679414] create_object.isra.0+0x3a/0xa20 [ 3168.680006] kmemleak_alloc_percpu+0xa0/0x100 [ 3168.680611] pcpu_alloc+0x4e2/0x1240 [ 3168.681132] ? io_async_queue_proc+0x80/0x80 [ 3168.681714] percpu_ref_init+0x31/0x3d0 [ 3168.682240] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3168.682903] io_uring_setup+0x14f6/0x2980 [ 3168.683440] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 3168.684013] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3168.684699] ? tick_program_event+0xa8/0x140 [ 3168.685304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3168.686000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3168.686689] do_syscall_64+0x33/0x40 [ 3168.687183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3168.687862] RIP: 0033:0x7fe147fe7b19 [ 3168.688360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3168.690766] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3168.691755] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3168.692670] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3168.693595] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3168.694512] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3168.695422] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:00:07 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:07 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x74, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3168.714786] loop5: detected capacity change from 0 to 135266304 [ 3168.731071] loop3: detected capacity change from 0 to 135266304 11:00:08 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 18) 11:00:08 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3168.794370] 9pnet_virtio: no channels available for device 127.0.0.1 11:00:08 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3168.902586] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3168.905412] FAULT_INJECTION: forcing a failure. [ 3168.905412] name failslab, interval 1, probability 0, space 0, times 0 [ 3168.908501] CPU: 1 PID: 16691 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3168.909668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3168.910771] Call Trace: [ 3168.911128] dump_stack+0x107/0x167 [ 3168.911613] should_fail.cold+0x5/0xa [ 3168.912123] ? percpu_ref_init+0xd8/0x3d0 [ 3168.912687] should_failslab+0x5/0x20 [ 3168.913101] kmem_cache_alloc_trace+0x55/0x320 [ 3168.913587] ? io_async_queue_proc+0x80/0x80 [ 3168.914053] percpu_ref_init+0xd8/0x3d0 [ 3168.914487] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3168.915068] io_uring_setup+0x14f6/0x2980 [ 3168.915516] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3168.916058] ? wait_for_completion_io+0x270/0x270 [ 3168.916588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3168.921351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3168.922150] do_syscall_64+0x33/0x40 [ 3168.922731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3168.923523] RIP: 0033:0x7fe147fe7b19 [ 3168.924102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3168.926782] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3168.927954] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3168.929004] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3168.929931] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3168.930870] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3168.936843] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:00:30 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b8db13738713aae85014fa5966aaa45420c0269cd200e103092dbdf87e9e436b023af3608d55f3af9be9475a210f8e73cd2f61511c42d2f6ffc0b96db0a7b2001908bd4d849dfafa4415a5ceea7"]) 11:00:30 executing program 4: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:30 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 19) 11:00:30 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:30 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:30 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc1, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:00:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3191.758024] 9pnet_virtio: no channels available for device 127.0.0.1 11:00:31 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3191.764397] loop5: detected capacity change from 0 to 135266304 [ 3191.782883] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3191.795675] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3191.797141] loop3: detected capacity change from 0 to 135266304 [ 3191.816286] FAULT_INJECTION: forcing a failure. [ 3191.816286] name failslab, interval 1, probability 0, space 0, times 0 [ 3191.819295] CPU: 0 PID: 16722 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3191.821066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3191.823158] Call Trace: [ 3191.823814] dump_stack+0x107/0x167 [ 3191.824719] should_fail.cold+0x5/0xa [ 3191.825317] ? create_object.isra.0+0x3a/0xa20 [ 3191.825916] should_failslab+0x5/0x20 [ 3191.826411] kmem_cache_alloc+0x5b/0x310 [ 3191.826937] create_object.isra.0+0x3a/0xa20 [ 3191.827501] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3191.828156] kmem_cache_alloc_trace+0x151/0x320 [ 3191.828756] ? io_async_queue_proc+0x80/0x80 [ 3191.829885] percpu_ref_init+0xd8/0x3d0 [ 3191.830883] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3191.832247] io_uring_setup+0x14f6/0x2980 [ 3191.833380] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3191.834651] ? wait_for_completion_io+0x270/0x270 [ 3191.835875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3191.837246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3191.838548] do_syscall_64+0x33/0x40 [ 3191.839479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3191.840767] RIP: 0033:0x7fe147fe7b19 [ 3191.841844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3191.846948] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3191.848863] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3191.851047] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3191.852839] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3191.854997] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3191.856786] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:00:31 executing program 4: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:31 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x39, 0x20, 0x6, 0x0, 0x80000000, 0x8408, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x200}, 0x40008, 0x100000000000, 0x4, 0x1, 0x4, 0x6, 0x1, 0x0, 0x8, 0x0, 0x1003}, 0x0, 0x3, r0, 0x3) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xd, 0x7, 0x5, 0x3, 0x0, 0x5, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x8000, 0x1, 0x5, 0x1, 0x80000000, 0x5, 0x5, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0x4, r0, 0x8) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1f, 0x16, 0x7f, 0xee, 0x0, 0x6, 0x20000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x220, 0xc45, 0x1, 0x6, 0xa2, 0x101, 0x9, 0x0, 0x2, 0x0, 0x6}, 0x0, 0xf, r1, 0x8) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f40f566e0ff11707e5197baeb99c87a787e12490dfc201eb9f7deb4e1417c9296403b1f464b4a1fd842469be1cca26d769a6972d23ef2d4ae37aa590f5226bdeb46c619055d58c07d63a6e55aacef17526c22a830bc38793a29b084c85030a655a4d410f949125dcc682a544fd2d8d14"]) 11:00:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:31 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x174, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:00:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3191.947910] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3191.962841] loop3: detected capacity change from 0 to 135266304 11:00:46 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:00:46 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 20) 11:00:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000080000d88400f1a574814458000000000000000003ffe60000000000000000000600000100000000042fc6da4bd6"], 0x46000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1, {0x0, r2}}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:46 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:00:46 executing program 4: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=000000', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3207.565894] loop3: detected capacity change from 0 to 135266304 [ 3207.592091] 9pnet_virtio: no channels available for device 127.0.0.1 11:00:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:46 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:46 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3207.594876] FAULT_INJECTION: forcing a failure. [ 3207.594876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3207.596505] CPU: 1 PID: 16749 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3207.597428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3207.598504] Call Trace: [ 3207.598860] dump_stack+0x107/0x167 [ 3207.599343] should_fail.cold+0x5/0xa [ 3207.599854] _copy_to_user+0x2e/0x180 [ 3207.600362] io_uring_setup+0x11b5/0x2980 [ 3207.600919] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3207.601605] ? wait_for_completion_io+0x270/0x270 [ 3207.602261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3207.602948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3207.603624] do_syscall_64+0x33/0x40 [ 3207.604117] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3207.604790] RIP: 0033:0x7fe147fe7b19 [ 3207.605302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3207.607670] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3207.608655] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3207.609607] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3207.610538] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3207.611473] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3207.612404] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3207.614865] loop5: detected capacity change from 0 to 135266304 11:00:46 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:00:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000080000d88400f1a574814458000000000000000003ffe60000000000000000000600000100000000042fc6da4bd6"], 0x46000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1, {0x0, r2}}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:00:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=000000', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3207.784007] loop5: detected capacity change from 0 to 135266304 [ 3223.439658] 9pnet_virtio: no channels available for device 127.0.0.1 11:01:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=000000', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000080000d88400f1a574814458000000000000000003ffe60000000000000000000600000100000000042fc6da4bd6"], 0x46000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1, {0x0, r2}}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:02 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 21) 11:01:02 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:02 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3223.444031] FAULT_INJECTION: forcing a failure. [ 3223.444031] name failslab, interval 1, probability 0, space 0, times 0 [ 3223.449557] CPU: 0 PID: 16799 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3223.449566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3223.449571] Call Trace: [ 3223.449590] dump_stack+0x107/0x167 [ 3223.449606] should_fail.cold+0x5/0xa [ 3223.449632] ? __d_alloc+0x2a/0x990 [ 3223.449664] should_failslab+0x5/0x20 [ 3223.449692] kmem_cache_alloc+0x5b/0x310 [ 3223.449715] __d_alloc+0x2a/0x990 [ 3223.449728] ? find_held_lock+0x2c/0x110 [ 3223.449745] d_alloc_pseudo+0x19/0x70 11:01:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3223.449758] alloc_file_pseudo+0xce/0x250 [ 3223.449769] ? trace_hardirqs_on+0x5b/0x180 [ 3223.449780] ? alloc_file+0x5a0/0x5a0 [ 3223.449805] anon_inode_getfile+0xc8/0x1f0 [ 3223.449823] io_uring_setup+0x138b/0x2980 [ 3223.449841] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3223.449854] ? wait_for_completion_io+0x270/0x270 [ 3223.449882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3223.449897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3223.449912] do_syscall_64+0x33/0x40 [ 3223.449928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3223.449937] RIP: 0033:0x7fe147fe7b19 [ 3223.449954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3223.449963] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 11:01:02 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3223.449979] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3223.449988] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3223.449996] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 11:01:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3223.450004] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 11:01:02 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 22) [ 3223.450013] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3223.482257] loop3: detected capacity change from 0 to 135266304 11:01:02 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3223.559156] loop5: detected capacity change from 0 to 135266304 [ 3223.579702] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3223.592394] FAULT_INJECTION: forcing a failure. [ 3223.592394] name failslab, interval 1, probability 0, space 0, times 0 [ 3223.593975] CPU: 0 PID: 16827 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3223.594908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3223.595964] Call Trace: [ 3223.596309] dump_stack+0x107/0x167 [ 3223.596780] should_fail.cold+0x5/0xa [ 3223.597319] ? create_object.isra.0+0x3a/0xa20 [ 3223.597906] should_failslab+0x5/0x20 [ 3223.598439] kmem_cache_alloc+0x5b/0x310 [ 3223.598966] create_object.isra.0+0x3a/0xa20 [ 3223.599531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3223.600183] kmem_cache_alloc+0x159/0x310 [ 3223.600721] __d_alloc+0x2a/0x990 [ 3223.601200] ? find_held_lock+0x2c/0x110 [ 3223.601732] d_alloc_pseudo+0x19/0x70 [ 3223.602220] alloc_file_pseudo+0xce/0x250 [ 3223.602754] ? trace_hardirqs_on+0x5b/0x180 [ 3223.603304] ? alloc_file+0x5a0/0x5a0 [ 3223.603808] anon_inode_getfile+0xc8/0x1f0 [ 3223.604355] io_uring_setup+0x138b/0x2980 [ 3223.604887] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3223.605589] ? wait_for_completion_io+0x270/0x270 [ 3223.606223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3223.606895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3223.607556] do_syscall_64+0x33/0x40 [ 3223.608035] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3223.608705] RIP: 0033:0x7fe147fe7b19 [ 3223.609194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3223.611617] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3223.612633] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3223.613557] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3223.614468] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3223.615411] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3223.616326] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:01:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000080000d88400f1a574814458000000000000000003ffe60000000000000000000600000100000000042fc6da4bd6"], 0x46000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=00000000000000000012,smackfstransm', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3223.680240] loop5: detected capacity change from 0 to 135266304 11:01:18 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 23) [ 3239.536789] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3239.540343] FAULT_INJECTION: forcing a failure. [ 3239.540343] name failslab, interval 1, probability 0, space 0, times 0 [ 3239.541888] CPU: 1 PID: 16862 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3239.542860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3239.543918] Call Trace: [ 3239.544264] dump_stack+0x107/0x167 [ 3239.544728] should_fail.cold+0x5/0xa [ 3239.545220] ? __alloc_file+0x21/0x320 [ 3239.545750] should_failslab+0x5/0x20 [ 3239.546241] kmem_cache_alloc+0x5b/0x310 [ 3239.546760] __alloc_file+0x21/0x320 [ 3239.547235] alloc_empty_file+0x6d/0x170 [ 3239.547892] alloc_file+0x5e/0x5a0 [ 3239.548571] alloc_file_pseudo+0x16a/0x250 [ 3239.549199] ? alloc_file+0x5a0/0x5a0 [ 3239.549790] anon_inode_getfile+0xc8/0x1f0 [ 3239.550334] io_uring_setup+0x138b/0x2980 [ 3239.550867] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3239.551508] ? wait_for_completion_io+0x270/0x270 [ 3239.552152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3239.552830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3239.553504] do_syscall_64+0x33/0x40 [ 3239.553996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3239.554647] RIP: 0033:0x7fe147fe7b19 11:01:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:01:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=00000000000000000012,smackfstransm', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:18 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000080000d88400f1a574814458000000000000000003ffe60000000000000000000600000100000000042fc6da4bd6"], 0x46000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:18 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:18 executing program 4: openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3239.555122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3239.557776] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3239.558748] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3239.559660] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3239.560598] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3239.561553] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3239.562507] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3239.573851] loop5: detected capacity change from 0 to 135266304 11:01:18 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 24) [ 3239.616554] loop3: detected capacity change from 0 to 135266304 11:01:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:01:18 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:18 executing program 4: openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3239.732165] loop3: detected capacity change from 0 to 135266304 11:01:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000080000d88400f1a574814458000000000000000003ffe60000000000000000000600000100000000042fc6da4bd6"], 0x46000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3239.771622] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3239.781014] FAULT_INJECTION: forcing a failure. [ 3239.781014] name failslab, interval 1, probability 0, space 0, times 0 [ 3239.782518] CPU: 0 PID: 16889 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3239.783402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3239.784501] Call Trace: [ 3239.784847] dump_stack+0x107/0x167 [ 3239.785317] should_fail.cold+0x5/0xa [ 3239.789831] ? create_object.isra.0+0x3a/0xa20 [ 3239.790421] should_failslab+0x5/0x20 [ 3239.790913] kmem_cache_alloc+0x5b/0x310 [ 3239.791433] create_object.isra.0+0x3a/0xa20 [ 3239.792001] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3239.792658] kmem_cache_alloc+0x159/0x310 [ 3239.793200] __alloc_file+0x21/0x320 [ 3239.793699] alloc_empty_file+0x6d/0x170 [ 3239.794221] alloc_file+0x5e/0x5a0 [ 3239.794706] alloc_file_pseudo+0x16a/0x250 [ 3239.795242] ? alloc_file+0x5a0/0x5a0 [ 3239.795774] anon_inode_getfile+0xc8/0x1f0 [ 3239.796332] io_uring_setup+0x138b/0x2980 [ 3239.796878] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3239.797537] ? wait_for_completion_io+0x270/0x270 [ 3239.798173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3239.798874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3239.799531] do_syscall_64+0x33/0x40 [ 3239.800019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3239.800675] RIP: 0033:0x7fe147fe7b19 [ 3239.801154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3239.803789] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3239.804891] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3239.805933] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3239.806967] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3239.807998] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3239.809040] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:01:34 executing program 4: openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 25) 11:01:34 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=00000000000000000012,smackfstransm', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:34 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:01:34 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:34 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000080000d88400f1a574814458000000000000000003ffe60000000000000000000600000100000000042fc6da4bd6"], 0x46000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:34 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3255.666343] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3255.673770] loop3: detected capacity change from 0 to 135266304 [ 3255.678832] FAULT_INJECTION: forcing a failure. [ 3255.678832] name failslab, interval 1, probability 0, space 0, times 0 [ 3255.680365] CPU: 0 PID: 16912 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3255.681295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3255.682386] Call Trace: [ 3255.682746] dump_stack+0x107/0x167 [ 3255.683225] should_fail.cold+0x5/0xa [ 3255.683759] ? security_file_alloc+0x34/0x170 [ 3255.684350] should_failslab+0x5/0x20 [ 3255.684849] kmem_cache_alloc+0x5b/0x310 [ 3255.685388] security_file_alloc+0x34/0x170 [ 3255.685985] __alloc_file+0xb7/0x320 [ 3255.686479] alloc_empty_file+0x6d/0x170 [ 3255.687034] alloc_file+0x5e/0x5a0 [ 3255.687502] alloc_file_pseudo+0x16a/0x250 [ 3255.688051] ? alloc_file+0x5a0/0x5a0 [ 3255.688568] anon_inode_getfile+0xc8/0x1f0 [ 3255.689126] io_uring_setup+0x138b/0x2980 [ 3255.689684] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3255.690343] ? wait_for_completion_io+0x270/0x270 [ 3255.690996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3255.691674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3255.692353] do_syscall_64+0x33/0x40 [ 3255.692849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3255.693519] RIP: 0033:0x7fe147fe7b19 [ 3255.694033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3255.696343] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3255.697349] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3255.698304] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3255.699244] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3255.700180] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3255.701115] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:01:34 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3255.735194] loop5: detected capacity change from 0 to 135266304 11:01:35 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:35 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) 11:01:35 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000080000d88400f1a574814458000000000000000003ffe60000000000000000000600000100000000042fc6da4bd6"], 0x46000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:35 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:35 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e26", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:35 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 26) 11:01:35 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3255.902980] loop5: detected capacity change from 0 to 135266304 [ 3255.916035] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3255.933266] FAULT_INJECTION: forcing a failure. [ 3255.933266] name failslab, interval 1, probability 0, space 0, times 0 [ 3255.937000] CPU: 1 PID: 16943 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3255.939209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3255.941878] Call Trace: [ 3255.942609] dump_stack+0x107/0x167 [ 3255.943769] should_fail.cold+0x5/0xa [ 3255.944853] ? create_object.isra.0+0x3a/0xa20 [ 3255.946245] should_failslab+0x5/0x20 [ 3255.947459] kmem_cache_alloc+0x5b/0x310 [ 3255.948733] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 3255.950529] create_object.isra.0+0x3a/0xa20 [ 3255.951844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3255.953362] kmem_cache_alloc+0x159/0x310 [ 3255.954574] security_file_alloc+0x34/0x170 [ 3255.955952] __alloc_file+0xb7/0x320 [ 3255.957161] alloc_empty_file+0x6d/0x170 [ 3255.958458] alloc_file+0x5e/0x5a0 [ 3255.959636] alloc_file_pseudo+0x16a/0x250 [ 3255.960982] ? alloc_file+0x5a0/0x5a0 [ 3255.962214] anon_inode_getfile+0xc8/0x1f0 [ 3255.963548] io_uring_setup+0x138b/0x2980 [ 3255.964875] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3255.966494] ? wait_for_completion_io+0x270/0x270 [ 3255.968031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3255.969662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3255.971293] do_syscall_64+0x33/0x40 [ 3255.972462] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3255.974098] RIP: 0033:0x7fe147fe7b19 [ 3255.975306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3255.981271] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3255.983570] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3255.985700] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3255.987984] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3255.990255] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3255.992519] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:01:51 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:51 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:01:51 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 27) 11:01:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:51 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) 11:01:51 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:01:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e26", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3271.800759] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3271.805823] FAULT_INJECTION: forcing a failure. [ 3271.805823] name failslab, interval 1, probability 0, space 0, times 0 [ 3271.807309] CPU: 0 PID: 16965 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3271.808168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3271.809235] Call Trace: [ 3271.809584] dump_stack+0x107/0x167 [ 3271.810095] should_fail.cold+0x5/0xa [ 3271.810593] ? io_uring_alloc_task_context+0x99/0x6a0 [ 3271.811242] should_failslab+0x5/0x20 [ 3271.811722] kmem_cache_alloc_trace+0x55/0x320 [ 3271.812328] io_uring_alloc_task_context+0x99/0x6a0 [ 3271.812958] ? io_import_iovec+0x1120/0x1120 [ 3271.812973] ? lock_downgrade+0x6d0/0x6d0 [ 3271.812986] ? do_raw_spin_lock+0x121/0x260 [ 3271.813001] ? rwlock_bug.part.0+0x90/0x90 [ 3271.813021] __io_uring_add_tctx_node+0x2c6/0x520 [ 3271.813037] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3271.813053] ? alloc_fd+0x2e7/0x670 [ 3271.813078] io_uring_setup+0x1fbb/0x2980 [ 3271.813101] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3271.813115] ? wait_for_completion_io+0x270/0x270 [ 3271.813150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3271.819382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3271.820028] do_syscall_64+0x33/0x40 [ 3271.820527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3271.821161] RIP: 0033:0x7fe147fe7b19 [ 3271.821624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3271.823988] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3271.824941] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3271.825856] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3271.826734] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3271.827610] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3271.828491] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3271.828819] loop5: detected capacity change from 0 to 135266304 11:01:51 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:01:51 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3271.846922] loop3: detected capacity change from 0 to 135266304 11:01:51 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 28) 11:01:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:51 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:01:51 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) 11:01:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3271.980122] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3271.985038] FAULT_INJECTION: forcing a failure. [ 3271.985038] name failslab, interval 1, probability 0, space 0, times 0 [ 3271.986627] CPU: 0 PID: 16986 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3271.987544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3271.988675] Call Trace: [ 3271.989049] dump_stack+0x107/0x167 [ 3271.989555] should_fail.cold+0x5/0xa [ 3271.990087] ? create_object.isra.0+0x3a/0xa20 [ 3271.990700] should_failslab+0x5/0x20 [ 3271.991210] kmem_cache_alloc+0x5b/0x310 [ 3271.991786] create_object.isra.0+0x3a/0xa20 [ 3271.992384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3271.993093] kmem_cache_alloc_trace+0x151/0x320 11:01:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e26", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3271.993728] io_uring_alloc_task_context+0x99/0x6a0 [ 3271.998444] ? io_import_iovec+0x1120/0x1120 [ 3271.999051] ? lock_downgrade+0x6d0/0x6d0 [ 3271.999606] ? do_raw_spin_lock+0x121/0x260 [ 3272.006147] ? rwlock_bug.part.0+0x90/0x90 [ 3272.006759] __io_uring_add_tctx_node+0x2c6/0x520 [ 3272.007422] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3272.008150] ? alloc_fd+0x2e7/0x670 [ 3272.008657] io_uring_setup+0x1fbb/0x2980 11:01:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3272.009235] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3272.009250] ? wait_for_completion_io+0x270/0x270 [ 3272.009292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3272.009312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3272.009334] do_syscall_64+0x33/0x40 [ 3272.009353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3272.009365] RIP: 0033:0x7fe147fe7b19 [ 3272.009384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3272.009395] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3272.009414] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3272.009424] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3272.009432] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3272.009442] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3272.009451] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:01:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3272.085996] loop5: detected capacity change from 0 to 135266304 [ 3272.119533] loop3: detected capacity change from 0 to 135266304 11:02:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c66", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:07 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 29) 11:02:07 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:02:07 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x0, 0xc3}) 11:02:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:07 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c756964", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:07 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:07 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:07 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3288.425282] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3288.432838] FAULT_INJECTION: forcing a failure. [ 3288.432838] name failslab, interval 1, probability 0, space 0, times 0 [ 3288.434333] CPU: 1 PID: 17035 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3288.435249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3288.436315] Call Trace: [ 3288.436668] dump_stack+0x107/0x167 [ 3288.437134] should_fail.cold+0x5/0xa [ 3288.437671] ? create_object.isra.0+0x3a/0xa20 [ 3288.438288] should_failslab+0x5/0x20 [ 3288.438788] kmem_cache_alloc+0x5b/0x310 [ 3288.439312] create_object.isra.0+0x3a/0xa20 [ 3288.439925] kmemleak_alloc_percpu+0xa0/0x100 [ 3288.440501] pcpu_alloc+0x4e2/0x1240 [ 3288.440991] __percpu_counter_init+0x10d/0x2d0 [ 3288.441603] io_uring_alloc_task_context+0xcc/0x6a0 [ 3288.442249] ? io_import_iovec+0x1120/0x1120 [ 3288.442859] ? lock_downgrade+0x6d0/0x6d0 [ 3288.443421] ? do_raw_spin_lock+0x121/0x260 [ 3288.443967] ? rwlock_bug.part.0+0x90/0x90 [ 3288.444544] __io_uring_add_tctx_node+0x2c6/0x520 [ 3288.445160] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3288.445827] ? alloc_fd+0x2e7/0x670 [ 3288.446336] io_uring_setup+0x1fbb/0x2980 [ 3288.446882] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3288.447572] ? wait_for_completion_io+0x270/0x270 [ 3288.448202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3288.448362] loop5: detected capacity change from 0 to 135266304 [ 3288.448870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3288.448886] do_syscall_64+0x33/0x40 [ 3288.448900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3288.448909] RIP: 0033:0x7fe147fe7b19 [ 3288.448925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3288.454392] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3288.455371] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3288.456282] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 11:02:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3288.457203] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3288.458167] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3288.459103] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3288.470170] loop3: detected capacity change from 0 to 135266304 11:02:07 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 30) 11:02:07 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) 11:02:07 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:07 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c756964", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:07 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4084, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3288.593617] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3288.609793] FAULT_INJECTION: forcing a failure. [ 3288.609793] name failslab, interval 1, probability 0, space 0, times 0 [ 3288.611324] CPU: 0 PID: 17054 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3288.612248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3288.613304] Call Trace: [ 3288.613671] dump_stack+0x107/0x167 [ 3288.614171] should_fail.cold+0x5/0xa [ 3288.614662] ? create_object.isra.0+0x3a/0xa20 [ 3288.615291] should_failslab+0x5/0x20 [ 3288.615811] kmem_cache_alloc+0x5b/0x310 [ 3288.616333] create_object.isra.0+0x3a/0xa20 [ 3288.616911] kmemleak_alloc_percpu+0xa0/0x100 [ 3288.617489] pcpu_alloc+0x4e2/0x1240 [ 3288.617988] __percpu_counter_init+0x10d/0x2d0 [ 3288.618596] io_uring_alloc_task_context+0xcc/0x6a0 [ 3288.619257] ? io_import_iovec+0x1120/0x1120 [ 3288.619858] ? lock_downgrade+0x6d0/0x6d0 [ 3288.620390] ? do_raw_spin_lock+0x121/0x260 [ 3288.620941] ? rwlock_bug.part.0+0x90/0x90 [ 3288.621487] __io_uring_add_tctx_node+0x2c6/0x520 [ 3288.622163] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3288.622838] ? alloc_fd+0x2e7/0x670 [ 3288.623313] io_uring_setup+0x1fbb/0x2980 [ 3288.623878] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3288.624520] ? wait_for_completion_io+0x270/0x270 [ 3288.625199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3288.625871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3288.626564] do_syscall_64+0x33/0x40 [ 3288.627044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3288.627704] RIP: 0033:0x7fe147fe7b19 [ 3288.628215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3288.630663] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3288.631644] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3288.632567] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3288.634951] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3288.637782] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3288.640669] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:02:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c66", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3288.674191] loop3: detected capacity change from 0 to 135266304 [ 3288.696316] loop5: detected capacity change from 0 to 135266304 [ 3290.466528] Bluetooth: hci2: command 0x0405 tx timeout 11:02:23 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 31) 11:02:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3304.681699] loop5: detected capacity change from 0 to 135266304 [ 3304.687284] 9pnet_virtio: no channels available for device 127.0.0.1 11:02:23 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:23 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c756964", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:23 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=00000000000000000012,smackfstransm', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c66", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:23 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4800, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:02:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3304.761010] FAULT_INJECTION: forcing a failure. [ 3304.761010] name failslab, interval 1, probability 0, space 0, times 0 [ 3304.762750] CPU: 0 PID: 17087 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3304.763632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3304.764693] Call Trace: [ 3304.765037] dump_stack+0x107/0x167 [ 3304.765511] should_fail.cold+0x5/0xa [ 3304.766005] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 3304.766716] should_failslab+0x5/0x20 [ 3304.767235] kmem_cache_alloc_trace+0x55/0x320 [ 3304.767838] io_uring_alloc_task_context+0x4a3/0x6a0 [ 3304.768488] ? io_import_iovec+0x1120/0x1120 [ 3304.769053] ? lock_downgrade+0x6d0/0x6d0 [ 3304.769581] ? do_raw_spin_lock+0x121/0x260 [ 3304.770131] ? rwlock_bug.part.0+0x90/0x90 [ 3304.770696] __io_uring_add_tctx_node+0x2c6/0x520 [ 3304.771319] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3304.771989] ? alloc_fd+0x2e7/0x670 [ 3304.772465] io_uring_setup+0x1fbb/0x2980 [ 3304.773003] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3304.773682] ? wait_for_completion_io+0x270/0x270 [ 3304.774687] loop3: detected capacity change from 0 to 135266304 [ 3304.786363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3304.786397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3304.788448] do_syscall_64+0x33/0x40 [ 3304.788936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3304.789615] RIP: 0033:0x7fe147fe7b19 [ 3304.790107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3304.792547] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3304.793543] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3304.794509] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3304.795474] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3304.796411] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3304.797345] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3304.820804] loop4: detected capacity change from 0 to 135266304 11:02:24 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:02:24 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:24 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 32) 11:02:24 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c756964", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3304.927012] loop5: detected capacity change from 0 to 135266304 11:02:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3305.029793] loop4: detected capacity change from 0 to 135266304 [ 3305.062314] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3305.067913] FAULT_INJECTION: forcing a failure. [ 3305.067913] name failslab, interval 1, probability 0, space 0, times 0 [ 3305.069464] CPU: 0 PID: 17119 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3305.070437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3305.071557] Call Trace: [ 3305.071915] dump_stack+0x107/0x167 [ 3305.072401] should_fail.cold+0x5/0xa [ 3305.072912] ? create_object.isra.0+0x3a/0xa20 [ 3305.073513] should_failslab+0x5/0x20 [ 3305.074024] kmem_cache_alloc+0x5b/0x310 [ 3305.078580] create_object.isra.0+0x3a/0xa20 [ 3305.079207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3305.079881] kmem_cache_alloc_trace+0x151/0x320 [ 3305.080503] io_uring_alloc_task_context+0x4a3/0x6a0 [ 3305.081175] ? io_import_iovec+0x1120/0x1120 [ 3305.081763] ? lock_downgrade+0x6d0/0x6d0 [ 3305.082331] ? do_raw_spin_lock+0x121/0x260 [ 3305.082902] ? rwlock_bug.part.0+0x90/0x90 [ 3305.083468] __io_uring_add_tctx_node+0x2c6/0x520 [ 3305.084106] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3305.084800] ? alloc_fd+0x2e7/0x670 [ 3305.085296] io_uring_setup+0x1fbb/0x2980 [ 3305.085854] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3305.086542] ? wait_for_completion_io+0x270/0x270 [ 3305.087199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3305.087897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3305.088582] do_syscall_64+0x33/0x40 [ 3305.089078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3305.089755] RIP: 0033:0x7fe147fe7b19 [ 3305.090266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3305.092655] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3305.093662] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3305.094610] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3305.095573] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3305.096550] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3305.097486] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:02:39 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:39 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x7ff) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x23) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x85) syz_io_uring_complete(0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x80}) perf_event_open(0x0, 0x0, 0x0, r2, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r0, 0x0) 11:02:39 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6800, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:02:39 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:39 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 33) 11:02:39 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:39 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3320.691921] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3320.697917] loop3: detected capacity change from 0 to 135266304 [ 3320.699213] FAULT_INJECTION: forcing a failure. [ 3320.699213] name failslab, interval 1, probability 0, space 0, times 0 [ 3320.700696] CPU: 0 PID: 17137 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3320.701592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3320.706694] Call Trace: [ 3320.707052] dump_stack+0x107/0x167 [ 3320.707535] should_fail.cold+0x5/0xa [ 3320.708043] ? io_wq_create+0xeb/0xc00 [ 3320.708557] should_failslab+0x5/0x20 [ 3320.709054] __kmalloc+0x72/0x390 [ 3320.709522] io_wq_create+0xeb/0xc00 [ 3320.710021] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3320.710705] ? io_import_iovec+0x1120/0x1120 [ 3320.711285] ? io_apoll_task_func+0x2d0/0x2d0 [ 3320.711865] ? __io_req_find_next+0x300/0x300 [ 3320.712451] ? do_raw_spin_lock+0x121/0x260 [ 3320.713012] ? rwlock_bug.part.0+0x90/0x90 [ 3320.713581] __io_uring_add_tctx_node+0x2c6/0x520 [ 3320.714213] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3320.714905] ? alloc_fd+0x2e7/0x670 [ 3320.715393] io_uring_setup+0x1fbb/0x2980 [ 3320.715947] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3320.716610] ? wait_for_completion_io+0x270/0x270 [ 3320.717271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3320.717952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3320.718688] do_syscall_64+0x33/0x40 [ 3320.719159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3320.719759] RIP: 0033:0x7fe147fe7b19 [ 3320.720252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3320.723086] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3320.724081] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3320.725020] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3320.725950] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3320.726899] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3320.727839] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:02:39 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3320.742886] loop5: detected capacity change from 0 to 135266304 11:02:40 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 34) 11:02:40 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) fsync(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:40 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3320.859001] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3320.873897] FAULT_INJECTION: forcing a failure. [ 3320.873897] name failslab, interval 1, probability 0, space 0, times 0 [ 3320.875499] CPU: 1 PID: 17153 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3320.876390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3320.877467] Call Trace: [ 3320.877828] dump_stack+0x107/0x167 [ 3320.878312] should_fail.cold+0x5/0xa [ 3320.878823] ? create_object.isra.0+0x3a/0xa20 [ 3320.879404] should_failslab+0x5/0x20 [ 3320.879899] kmem_cache_alloc+0x5b/0x310 [ 3320.880421] create_object.isra.0+0x3a/0xa20 [ 3320.880980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3320.881632] __kmalloc+0x16e/0x390 [ 3320.882089] io_wq_create+0xeb/0xc00 [ 3320.882605] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3320.883275] ? io_import_iovec+0x1120/0x1120 [ 3320.883853] ? io_apoll_task_func+0x2d0/0x2d0 [ 3320.884426] ? __io_req_find_next+0x300/0x300 [ 3320.884999] ? do_raw_spin_lock+0x121/0x260 [ 3320.885565] ? rwlock_bug.part.0+0x90/0x90 [ 3320.886122] __io_uring_add_tctx_node+0x2c6/0x520 [ 3320.886795] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3320.887483] ? alloc_fd+0x2e7/0x670 [ 3320.887980] io_uring_setup+0x1fbb/0x2980 [ 3320.888539] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3320.889200] ? wait_for_completion_io+0x270/0x270 [ 3320.889856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3320.890570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3320.891230] do_syscall_64+0x33/0x40 [ 3320.891706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3320.892357] RIP: 0033:0x7fe147fe7b19 [ 3320.892832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3320.899214] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3320.900218] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3320.901152] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3320.902091] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3320.903044] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3320.903984] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:02:40 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3320.945861] loop5: detected capacity change from 0 to 135266304 [ 3320.970339] loop3: detected capacity change from 0 to 135266304 11:02:40 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7400, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:02:40 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 35) [ 3321.094820] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3321.097455] FAULT_INJECTION: forcing a failure. [ 3321.097455] name failslab, interval 1, probability 0, space 0, times 0 [ 3321.114975] CPU: 1 PID: 17180 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3321.115858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3321.116913] Call Trace: [ 3321.117252] dump_stack+0x107/0x167 [ 3321.117715] should_fail.cold+0x5/0xa [ 3321.118211] ? io_wq_create+0x6ef/0xc00 [ 3321.118741] should_failslab+0x5/0x20 [ 3321.119229] kmem_cache_alloc_node_trace+0x59/0x340 [ 3321.119870] io_wq_create+0x6ef/0xc00 [ 3321.120362] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3321.121010] ? io_import_iovec+0x1120/0x1120 [ 3321.121566] ? io_apoll_task_func+0x2d0/0x2d0 [ 3321.122140] ? __io_req_find_next+0x300/0x300 [ 3321.122764] ? do_raw_spin_lock+0x121/0x260 [ 3321.123324] ? rwlock_bug.part.0+0x90/0x90 [ 3321.123861] __io_uring_add_tctx_node+0x2c6/0x520 [ 3321.124477] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3321.125169] ? alloc_fd+0x2e7/0x670 [ 3321.125662] io_uring_setup+0x1fbb/0x2980 [ 3321.126217] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3321.126906] ? wait_for_completion_io+0x270/0x270 [ 3321.127555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3321.128251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3321.128933] do_syscall_64+0x33/0x40 [ 3321.129425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3321.130098] RIP: 0033:0x7fe147fe7b19 [ 3321.130605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3321.132996] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3321.133970] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3321.143024] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3321.143950] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3321.144893] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3321.145832] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:02:55 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:55 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 36) 11:02:55 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7400, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3336.726848] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3336.734786] loop3: detected capacity change from 0 to 135266304 [ 3336.736030] FAULT_INJECTION: forcing a failure. [ 3336.736030] name failslab, interval 1, probability 0, space 0, times 0 [ 3336.737621] CPU: 0 PID: 17200 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3336.738543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3336.739632] Call Trace: [ 3336.739986] dump_stack+0x107/0x167 [ 3336.740464] should_fail.cold+0x5/0xa [ 3336.740964] ? create_object.isra.0+0x3a/0xa20 [ 3336.741568] should_failslab+0x5/0x20 [ 3336.742062] kmem_cache_alloc+0x5b/0x310 [ 3336.742601] ? io_wq_create+0x114/0xc00 [ 3336.743186] create_object.isra.0+0x3a/0xa20 [ 3336.743757] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3336.744422] kmem_cache_alloc_node_trace+0x16d/0x340 [ 3336.745080] io_wq_create+0x6ef/0xc00 [ 3336.745585] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3336.746242] ? io_import_iovec+0x1120/0x1120 [ 3336.746862] ? io_apoll_task_func+0x2d0/0x2d0 [ 3336.747441] ? __io_req_find_next+0x300/0x300 [ 3336.748019] ? do_raw_spin_lock+0x121/0x260 [ 3336.748602] ? rwlock_bug.part.0+0x90/0x90 [ 3336.749150] __io_uring_add_tctx_node+0x2c6/0x520 [ 3336.749818] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3336.750494] ? alloc_fd+0x2e7/0x670 [ 3336.750817] loop5: detected capacity change from 0 to 135266304 [ 3336.751336] io_uring_setup+0x1fbb/0x2980 [ 3336.752650] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3336.753301] ? wait_for_completion_io+0x270/0x270 [ 3336.753951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3336.754837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3336.755835] do_syscall_64+0x33/0x40 [ 3336.756395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3336.757184] RIP: 0033:0x7fe147fe7b19 [ 3336.757901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3336.761825] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3336.763017] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3336.763962] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3336.764924] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3336.765844] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3336.766777] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:02:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:55 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7401, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:02:55 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e6572", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:55 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:56 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:56 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 1) 11:02:56 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:02:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:02:56 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e6572", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) 11:02:56 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1}}], 0x8, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:02:56 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3336.890215] FAULT_INJECTION: forcing a failure. [ 3336.890215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3336.891803] CPU: 0 PID: 17214 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 3336.892717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3336.893798] Call Trace: [ 3336.894154] dump_stack+0x107/0x167 [ 3336.894643] should_fail.cold+0x5/0xa [ 3336.895145] _copy_from_user+0x2e/0x1b0 [ 3336.895663] cdrom_ioctl+0x12df/0x2bb0 [ 3336.896169] ? mmc_ioctl_cdrom_read_audio+0xc70/0xc70 [ 3336.896842] ? rpm_resume+0x564/0x1b10 [ 3336.897339] ? find_held_lock+0x2c/0x110 [ 3336.897871] ? __pm_runtime_resume+0xc5/0x180 [ 3336.898452] ? mark_held_locks+0x9e/0xe0 [ 3336.898997] ? blkdev_common_ioctl+0xfa/0x1930 [ 3336.899599] ? __pm_runtime_resume+0xc5/0x180 [ 3336.900188] sr_block_ioctl+0x145/0x1b0 [ 3336.900714] ? sr_block_compat_ioctl+0x1b0/0x1b0 [ 3336.901367] blkdev_ioctl+0x291/0x710 [ 3336.901398] ? blkdev_common_ioctl+0x1930/0x1930 [ 3336.901415] ? selinux_file_ioctl+0xb6/0x270 11:02:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3336.901433] block_ioctl+0xf9/0x140 [ 3336.901445] ? blkdev_read_iter+0x1c0/0x1c0 [ 3336.901460] __x64_sys_ioctl+0x19a/0x210 [ 3336.901476] do_syscall_64+0x33/0x40 [ 3336.901490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3336.901499] RIP: 0033:0x7f469b28cb19 [ 3336.901512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3336.901520] RSP: 002b:00007f4698802188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3336.901534] RAX: ffffffffffffffda RBX: 00007f469b39ff60 RCX: 00007f469b28cb19 [ 3336.901542] RDX: 00000000200000c0 RSI: 0000000000005305 RDI: 0000000000000003 [ 3336.901550] RBP: 00007f46988021d0 R08: 0000000000000000 R09: 0000000000000000 [ 3336.901558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3336.901566] R13: 00007fffd54dd43f R14: 00007f4698802300 R15: 0000000000022000 [ 3336.992356] loop3: detected capacity change from 0 to 135266304 [ 3336.996637] loop5: detected capacity change from 0 to 135266304 [ 3352.495893] 9pnet_virtio: no channels available for device 127.0.0.1 11:03:11 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:03:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:11 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e6572", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) 11:03:11 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:11 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 2) 11:03:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:03:11 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 37) [ 3352.506348] loop3: detected capacity change from 0 to 135266304 11:03:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3352.534697] loop5: detected capacity change from 0 to 135266304 11:03:11 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:03:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) [ 3352.567309] FAULT_INJECTION: forcing a failure. [ 3352.567309] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.568883] CPU: 1 PID: 17255 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3352.575198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3352.576246] Call Trace: [ 3352.576595] dump_stack+0x107/0x167 [ 3352.577063] should_fail.cold+0x5/0xa [ 3352.577554] ? __io_uring_add_tctx_node+0x15c/0x520 [ 3352.578194] should_failslab+0x5/0x20 [ 3352.578686] kmem_cache_alloc_trace+0x55/0x320 [ 3352.583265] __io_uring_add_tctx_node+0x15c/0x520 [ 3352.583876] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3352.584587] ? alloc_fd+0x2e7/0x670 [ 3352.585060] io_uring_setup+0x1fbb/0x2980 [ 3352.585594] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3352.586264] ? wait_for_completion_io+0x270/0x270 [ 3352.590908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3352.591577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3352.592231] do_syscall_64+0x33/0x40 [ 3352.592715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3352.593368] RIP: 0033:0x7fe147fe7b19 [ 3352.593844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3352.604186] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3352.605151] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3352.606065] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3352.606989] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3352.607895] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3352.608846] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3352.617960] FAULT_INJECTION: forcing a failure. [ 3352.617960] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.619476] CPU: 1 PID: 17257 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 3352.620390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3352.621480] Call Trace: [ 3352.621825] dump_stack+0x107/0x167 [ 3352.622292] should_fail.cold+0x5/0xa [ 3352.622796] ? sr_read_tochdr.isra.0+0x16e/0x350 [ 3352.623438] should_failslab+0x5/0x20 [ 3352.623924] kmem_cache_alloc_trace+0x55/0x320 [ 3352.624550] ? lock_acquire+0x197/0x470 [ 3352.625064] sr_read_tochdr.isra.0+0x16e/0x350 [ 3352.625650] ? sr_read_tocentry.isra.0+0x6e0/0x6e0 [ 3352.626297] ? lock_acquire+0x197/0x470 [ 3352.626832] ? find_held_lock+0x2c/0x110 [ 3352.627365] ? __might_fault+0xd3/0x180 [ 3352.627909] sr_audio_ioctl+0x10f/0x2e0 [ 3352.628418] ? sr_select_speed+0x170/0x170 [ 3352.628970] ? _copy_from_user+0xfb/0x1b0 [ 3352.629532] cdrom_ioctl+0x134c/0x2bb0 [ 3352.630030] ? mmc_ioctl_cdrom_read_audio+0xc70/0xc70 [ 3352.630752] ? rpm_resume+0x564/0x1b10 [ 3352.631250] ? find_held_lock+0x2c/0x110 [ 3352.631797] ? __pm_runtime_resume+0xc5/0x180 [ 3352.632374] ? mark_held_locks+0x9e/0xe0 [ 3352.632901] ? blkdev_common_ioctl+0xfa/0x1930 [ 3352.633496] ? __pm_runtime_resume+0xc5/0x180 [ 3352.634073] sr_block_ioctl+0x145/0x1b0 [ 3352.634612] ? sr_block_compat_ioctl+0x1b0/0x1b0 [ 3352.635225] blkdev_ioctl+0x291/0x710 [ 3352.635756] ? blkdev_common_ioctl+0x1930/0x1930 [ 3352.636399] ? selinux_file_ioctl+0xb6/0x270 [ 3352.636962] block_ioctl+0xf9/0x140 [ 3352.637455] ? blkdev_read_iter+0x1c0/0x1c0 [ 3352.638027] __x64_sys_ioctl+0x19a/0x210 [ 3352.638551] do_syscall_64+0x33/0x40 [ 3352.639090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3352.639773] RIP: 0033:0x7f469b28cb19 [ 3352.640247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3352.642665] RSP: 002b:00007f4698802188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3352.643700] RAX: ffffffffffffffda RBX: 00007f469b39ff60 RCX: 00007f469b28cb19 [ 3352.644641] RDX: 00000000200000c0 RSI: 0000000000005305 RDI: 0000000000000003 [ 3352.645588] RBP: 00007f46988021d0 R08: 0000000000000000 R09: 0000000000000000 [ 3352.646500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3352.647432] R13: 00007fffd54dd43f R14: 00007f4698802300 R15: 0000000000022000 11:03:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:11 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:11 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:11 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 38) 11:03:12 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 3) 11:03:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x0, 0xc3}) [ 3352.764128] loop3: detected capacity change from 0 to 135266304 11:03:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3352.791941] loop5: detected capacity change from 0 to 135266304 [ 3352.797586] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3352.801161] FAULT_INJECTION: forcing a failure. [ 3352.801161] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.802683] CPU: 1 PID: 17288 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3352.803572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3352.804627] Call Trace: [ 3352.804967] dump_stack+0x107/0x167 [ 3352.805432] should_fail.cold+0x5/0xa [ 3352.805965] ? create_object.isra.0+0x3a/0xa20 [ 3352.806552] should_failslab+0x5/0x20 [ 3352.807078] kmem_cache_alloc+0x5b/0x310 [ 3352.807597] create_object.isra.0+0x3a/0xa20 [ 3352.808201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3352.808852] kmem_cache_alloc_trace+0x151/0x320 [ 3352.809458] __io_uring_add_tctx_node+0x15c/0x520 [ 3352.810105] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3352.810818] ? alloc_fd+0x2e7/0x670 [ 3352.811301] io_uring_setup+0x1fbb/0x2980 [ 3352.811849] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3352.812496] ? wait_for_completion_io+0x270/0x270 [ 3352.813156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3352.813865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3352.814526] do_syscall_64+0x33/0x40 [ 3352.815023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3352.815706] RIP: 0033:0x7fe147fe7b19 [ 3352.816184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3352.818559] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3352.819571] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3352.820525] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3352.821453] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3352.822368] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3352.823308] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:03:28 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:03:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:03:28 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) 11:03:28 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 39) 11:03:28 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:28 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) 11:03:28 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3369.599141] 9pnet_virtio: no channels available for device 127.0.0.1 11:03:28 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003640)=""/58, 0x3a}], 0x1}}], 0x7, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:28 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3369.619027] FAULT_INJECTION: forcing a failure. [ 3369.619027] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.628056] CPU: 0 PID: 17307 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3369.628941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3369.630039] Call Trace: [ 3369.630383] dump_stack+0x107/0x167 [ 3369.630851] should_fail.cold+0x5/0xa [ 3369.631387] ? xas_alloc+0x336/0x440 [ 3369.631873] should_failslab+0x5/0x20 [ 3369.632371] kmem_cache_alloc+0x5b/0x310 [ 3369.632904] ? stack_trace_consume_entry+0x160/0x160 [ 3369.633555] xas_alloc+0x336/0x440 [ 3369.634012] xas_create+0x34a/0x10d0 [ 3369.634496] ? kernel_text_address+0xf2/0x120 [ 3369.635081] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3369.635756] xas_store+0x8c/0x1c40 [ 3369.636220] __xa_store+0x164/0x2d0 [ 3369.636860] ? xa_delete_node+0x280/0x280 [ 3369.637495] ? trace_hardirqs_on+0x5b/0x180 [ 3369.638190] xa_store+0x31/0x50 [ 3369.638622] __io_uring_add_tctx_node+0x1cf/0x520 [ 3369.639257] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3369.639937] ? alloc_fd+0x2e7/0x670 [ 3369.640412] io_uring_setup+0x1fbb/0x2980 [ 3369.640948] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3369.641595] ? wait_for_completion_io+0x270/0x270 [ 3369.642222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3369.642915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3369.643589] do_syscall_64+0x33/0x40 [ 3369.644070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3369.644727] RIP: 0033:0x7fe147fe7b19 [ 3369.645200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3369.647631] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3369.648610] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3369.649520] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3369.650430] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3369.651349] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3369.652265] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3369.673892] loop3: detected capacity change from 0 to 135266304 [ 3369.685718] loop5: detected capacity change from 0 to 135266304 11:03:28 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x6, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:29 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) 11:03:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:03:29 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 40) 11:03:29 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:29 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/114, 0x72}], 0x3, &(0x7f0000003540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x6, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:29 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3369.821053] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3369.828290] FAULT_INJECTION: forcing a failure. [ 3369.828290] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.829904] CPU: 1 PID: 17333 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3369.835756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3369.836814] Call Trace: [ 3369.837155] dump_stack+0x107/0x167 [ 3369.837622] should_fail.cold+0x5/0xa [ 3369.838119] ? xas_alloc+0x336/0x440 [ 3369.838599] should_failslab+0x5/0x20 [ 3369.839102] kmem_cache_alloc+0x5b/0x310 [ 3369.839626] ? stack_trace_consume_entry+0x160/0x160 [ 3369.840275] xas_alloc+0x336/0x440 [ 3369.840729] xas_create+0x34a/0x10d0 [ 3369.841221] ? kernel_text_address+0xf2/0x120 [ 3369.841800] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3369.842471] xas_store+0x8c/0x1c40 [ 3369.842947] __xa_store+0x164/0x2d0 [ 3369.843421] ? xa_delete_node+0x280/0x280 [ 3369.843960] ? trace_hardirqs_on+0x5b/0x180 [ 3369.844512] xa_store+0x31/0x50 [ 3369.844943] __io_uring_add_tctx_node+0x1cf/0x520 [ 3369.845559] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3369.846230] ? alloc_fd+0x2e7/0x670 [ 3369.846706] io_uring_setup+0x1fbb/0x2980 [ 3369.847256] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3369.847906] ? wait_for_completion_io+0x270/0x270 [ 3369.848541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3369.849215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3369.849881] do_syscall_64+0x33/0x40 [ 3369.850357] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3369.851031] RIP: 0033:0x7fe147fe7b19 [ 3369.851510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3369.853858] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3369.854843] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3369.855767] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3369.856676] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3369.857589] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3369.858503] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3369.926751] loop3: detected capacity change from 0 to 135266304 [ 3369.944889] loop2: detected capacity change from 0 to 135266304 11:03:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:45 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3385.917685] 9pnet_virtio: no channels available for device 127.0.0.1 11:03:45 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:03:45 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 41) 11:03:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:03:45 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}], 0x5, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:45 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x0, 0x1}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) finit_module(r2, &(0x7f0000000040)='/dev/sr0\x00', 0x3) ioctl$DVD_READ_STRUCT(r1, 0x5312, 0x0) signalfd4(r1, &(0x7f0000000000)={[0x10001]}, 0x8, 0x100800) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r3, 0x5312, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r3, 0x5396, &(0x7f0000000080)={0x9, 0x1}) [ 3385.920264] loop3: detected capacity change from 0 to 135266304 11:03:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3385.956854] FAULT_INJECTION: forcing a failure. [ 3385.956854] name failslab, interval 1, probability 0, space 0, times 0 [ 3385.958353] CPU: 0 PID: 17365 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3385.959276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3385.960343] Call Trace: [ 3385.960693] dump_stack+0x107/0x167 [ 3385.961177] should_fail.cold+0x5/0xa [ 3385.961684] ? xas_alloc+0x336/0x440 [ 3385.962178] should_failslab+0x5/0x20 [ 3385.962685] kmem_cache_alloc+0x5b/0x310 [ 3385.963497] xas_alloc+0x336/0x440 [ 3385.964449] xas_create+0x34a/0x10d0 [ 3385.965461] ? kernel_text_address+0xf2/0x120 [ 3385.966673] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3385.968263] xas_store+0x8c/0x1c40 [ 3385.969242] __xa_store+0x164/0x2d0 [ 3385.970176] ? xa_delete_node+0x280/0x280 [ 3385.971186] ? trace_hardirqs_on+0x5b/0x180 [ 3385.971767] xa_store+0x31/0x50 [ 3385.972205] __io_uring_add_tctx_node+0x1cf/0x520 [ 3385.972842] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3385.973530] ? alloc_fd+0x2e7/0x670 [ 3385.974019] io_uring_setup+0x1fbb/0x2980 [ 3385.974576] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3385.975256] ? wait_for_completion_io+0x270/0x270 [ 3385.975912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3385.976600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3385.977284] do_syscall_64+0x33/0x40 [ 3385.977777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3385.978451] RIP: 0033:0x7fe147fe7b19 [ 3385.978940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3385.981342] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3385.982304] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3385.983249] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3385.984173] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3385.985108] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3385.986038] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:03:45 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000003200)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=000000', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:45 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3386.073173] loop3: detected capacity change from 0 to 135266304 11:03:45 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3386.083153] loop5: detected capacity change from 0 to 135266304 11:03:45 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:03:45 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/24, 0x18}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/138, 0x8a}, {&(0x7f0000001e00)=""/206, 0xce}, {&(0x7f0000001f00)=""/173, 0xad}, {&(0x7f0000001fc0)=""/102, 0x66}], 0x9, &(0x7f0000002100)}}], 0x3, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:03:45 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:04:01 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x22401, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) 11:04:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:04:01 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:04:01 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 42) 11:04:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=000000', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/49, 0x31}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x2, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:01 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0d9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3402.055968] loop3: detected capacity change from 0 to 135266304 [ 3402.066485] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3402.073238] FAULT_INJECTION: forcing a failure. [ 3402.073238] name failslab, interval 1, probability 0, space 0, times 0 [ 3402.074809] CPU: 0 PID: 17421 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3402.075736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3402.076806] Call Trace: [ 3402.077162] dump_stack+0x107/0x167 [ 3402.077645] should_fail.cold+0x5/0xa [ 3402.078151] ? create_object.isra.0+0x3a/0xa20 [ 3402.078759] should_failslab+0x5/0x20 [ 3402.083289] kmem_cache_alloc+0x5b/0x310 [ 3402.083838] ? mark_held_locks+0x9e/0xe0 [ 3402.084376] create_object.isra.0+0x3a/0xa20 [ 3402.084948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3402.085629] kmem_cache_alloc+0x159/0x310 [ 3402.086185] xas_alloc+0x336/0x440 [ 3402.086710] xas_create+0x34a/0x10d0 [ 3402.087258] ? kernel_text_address+0xf2/0x120 [ 3402.087844] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3402.088539] xas_store+0x8c/0x1c40 [ 3402.089020] __xa_store+0x164/0x2d0 [ 3402.089501] ? xa_delete_node+0x280/0x280 [ 3402.090063] ? trace_hardirqs_on+0x5b/0x180 [ 3402.090638] xa_store+0x31/0x50 [ 3402.091083] __io_uring_add_tctx_node+0x1cf/0x520 [ 3402.091739] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3402.092422] ? alloc_fd+0x2e7/0x670 [ 3402.092923] io_uring_setup+0x1fbb/0x2980 [ 3402.093473] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3402.094139] ? wait_for_completion_io+0x270/0x270 [ 3402.094796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3402.095502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3402.096193] do_syscall_64+0x33/0x40 [ 3402.096687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3402.097360] RIP: 0033:0x7fe147fe7b19 [ 3402.097854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3402.100279] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3402.101264] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3402.102205] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3402.103136] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3402.104084] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3402.105019] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3402.121237] loop5: detected capacity change from 0 to 135266304 [ 3418.727786] loop5: detected capacity change from 0 to 135266304 11:04:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:17 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xf8982, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) 11:04:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0da, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:04:17 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:04:17 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=000000', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:18 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 43) 11:04:18 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 1) [ 3418.782639] FAULT_INJECTION: forcing a failure. [ 3418.782639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3418.784203] CPU: 0 PID: 17452 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 3418.785082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3418.786154] Call Trace: [ 3418.786507] dump_stack+0x107/0x167 11:04:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0db, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3418.786983] should_fail.cold+0x5/0xa [ 3418.787497] _copy_from_user+0x2e/0x1b0 [ 3418.788017] cdrom_ioctl+0x12df/0x2bb0 [ 3418.788521] ? mmc_ioctl_cdrom_read_audio+0xc70/0xc70 [ 3418.789196] ? rpm_resume+0x564/0x1b10 [ 3418.795853] ? find_held_lock+0x2c/0x110 [ 3418.796380] ? __pm_runtime_resume+0xc5/0x180 [ 3418.796959] ? mark_held_locks+0x9e/0xe0 [ 3418.797484] ? blkdev_common_ioctl+0xfa/0x1930 [ 3418.798081] ? __pm_runtime_resume+0xc5/0x180 [ 3418.798656] sr_block_ioctl+0x145/0x1b0 [ 3418.799171] ? sr_block_compat_ioctl+0x1b0/0x1b0 [ 3418.799791] blkdev_ioctl+0x291/0x710 [ 3418.800280] ? blkdev_common_ioctl+0x1930/0x1930 [ 3418.800895] ? selinux_file_ioctl+0xb6/0x270 [ 3418.801464] block_ioctl+0xf9/0x140 [ 3418.801932] ? blkdev_read_iter+0x1c0/0x1c0 [ 3418.802492] __x64_sys_ioctl+0x19a/0x210 [ 3418.803018] do_syscall_64+0x33/0x40 [ 3418.803515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3418.804171] RIP: 0033:0x7fbf35305b19 [ 3418.804657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3418.807012] RSP: 002b:00007fbf3287b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3418.808003] RAX: ffffffffffffffda RBX: 00007fbf35418f60 RCX: 00007fbf35305b19 [ 3418.808910] RDX: 00000000200000c0 RSI: 0000000000005305 RDI: 0000000000000003 [ 3418.809829] RBP: 00007fbf3287b1d0 R08: 0000000000000000 R09: 0000000000000000 11:04:18 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3418.810742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3418.811671] R13: 00007ffe0c02c2df R14: 00007fbf3287b300 R15: 0000000000022000 [ 3418.815660] loop3: detected capacity change from 0 to 135266304 [ 3418.821871] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3418.825715] FAULT_INJECTION: forcing a failure. [ 3418.825715] name failslab, interval 1, probability 0, space 0, times 0 11:04:18 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780), 0x0, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3418.827226] CPU: 0 PID: 17459 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3418.828114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3418.829179] Call Trace: [ 3418.829526] dump_stack+0x107/0x167 [ 3418.829995] should_fail.cold+0x5/0xa [ 3418.830492] ? xas_alloc+0x336/0x440 [ 3418.835765] should_failslab+0x5/0x20 [ 3418.836254] kmem_cache_alloc+0x5b/0x310 [ 3418.836779] xas_alloc+0x336/0x440 [ 3418.837239] xas_create+0x34a/0x10d0 [ 3418.837721] ? kernel_text_address+0xf2/0x120 [ 3418.838301] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3418.838973] xas_store+0x8c/0x1c40 [ 3418.839445] __xa_store+0x164/0x2d0 [ 3418.839915] ? xa_delete_node+0x280/0x280 [ 3418.840457] ? trace_hardirqs_on+0x5b/0x180 [ 3418.841014] xa_store+0x31/0x50 [ 3418.841441] __io_uring_add_tctx_node+0x1cf/0x520 [ 3418.842057] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3418.842725] ? alloc_fd+0x2e7/0x670 [ 3418.843197] io_uring_setup+0x1fbb/0x2980 [ 3418.843759] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3418.844407] ? wait_for_completion_io+0x270/0x270 [ 3418.845038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3418.845712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3418.846372] do_syscall_64+0x33/0x40 [ 3418.846849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3418.847519] RIP: 0033:0x7fe147fe7b19 [ 3418.847994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3418.850349] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3418.851321] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3418.852251] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3418.853155] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3418.854072] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3418.854981] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:04:18 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) r1 = mq_open(&(0x7f0000000000)='\xad\x00', 0x800, 0x0, &(0x7f0000000040)={0x5, 0x4, 0x101, 0xff}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r2, 0x5312, 0x0) close(r2) pidfd_getfd(r0, r1, 0x0) 11:04:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:18 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:04:18 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780), 0x0, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0dc, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:04:18 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 2) [ 3419.015101] loop5: detected capacity change from 0 to 135266304 [ 3419.098978] FAULT_INJECTION: forcing a failure. [ 3419.098978] name failslab, interval 1, probability 0, space 0, times 0 [ 3419.100561] CPU: 0 PID: 17487 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 3419.101445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3419.102497] Call Trace: [ 3419.102847] dump_stack+0x107/0x167 [ 3419.103317] should_fail.cold+0x5/0xa [ 3419.104263] ? sr_read_tochdr.isra.0+0x16e/0x350 [ 3419.105455] should_failslab+0x5/0x20 [ 3419.106402] kmem_cache_alloc_trace+0x55/0x320 [ 3419.107508] ? lock_acquire+0x197/0x470 [ 3419.108032] sr_read_tochdr.isra.0+0x16e/0x350 [ 3419.108621] ? sr_read_tocentry.isra.0+0x6e0/0x6e0 [ 3419.109251] ? lock_acquire+0x197/0x470 [ 3419.109762] ? find_held_lock+0x2c/0x110 [ 3419.110286] ? __might_fault+0xd3/0x180 [ 3419.110800] sr_audio_ioctl+0x10f/0x2e0 [ 3419.111310] ? sr_select_speed+0x170/0x170 [ 3419.111885] ? _copy_from_user+0xfb/0x1b0 [ 3419.112418] cdrom_ioctl+0x134c/0x2bb0 [ 3419.112926] ? mmc_ioctl_cdrom_read_audio+0xc70/0xc70 [ 3419.113597] ? rpm_resume+0x564/0x1b10 [ 3419.114095] ? find_held_lock+0x2c/0x110 [ 3419.114622] ? __pm_runtime_resume+0xc5/0x180 [ 3419.115201] ? mark_held_locks+0x9e/0xe0 [ 3419.115745] ? blkdev_common_ioctl+0xfa/0x1930 [ 3419.116340] ? __pm_runtime_resume+0xc5/0x180 [ 3419.116919] sr_block_ioctl+0x145/0x1b0 [ 3419.117431] ? sr_block_compat_ioctl+0x1b0/0x1b0 [ 3419.118041] blkdev_ioctl+0x291/0x710 [ 3419.118531] ? blkdev_common_ioctl+0x1930/0x1930 [ 3419.119141] ? selinux_file_ioctl+0xb6/0x270 [ 3419.119730] block_ioctl+0xf9/0x140 [ 3419.120195] ? blkdev_read_iter+0x1c0/0x1c0 [ 3419.120752] __x64_sys_ioctl+0x19a/0x210 [ 3419.121272] do_syscall_64+0x33/0x40 [ 3419.121751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3419.122411] RIP: 0033:0x7fbf35305b19 [ 3419.122889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3419.125260] RSP: 002b:00007fbf3287b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3419.126236] RAX: ffffffffffffffda RBX: 00007fbf35418f60 RCX: 00007fbf35305b19 [ 3419.127147] RDX: 00000000200000c0 RSI: 0000000000005305 RDI: 0000000000000003 [ 3419.128082] RBP: 00007fbf3287b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3419.128993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3419.129905] R13: 00007ffe0c02c2df R14: 00007fbf3287b300 R15: 0000000000022000 11:04:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 3) 11:04:33 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0dd, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:04:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=00000000000000000012,smackfstransm', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:33 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780), 0x0, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:33 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5312, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, r1, 0x20782000) 11:04:33 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:04:33 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 44) [ 3434.729434] loop3: detected capacity change from 0 to 135266304 [ 3434.758557] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3434.764585] FAULT_INJECTION: forcing a failure. [ 3434.764585] name failslab, interval 1, probability 0, space 0, times 0 [ 3434.766059] CPU: 0 PID: 17507 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3434.766952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3434.768028] Call Trace: [ 3434.768374] dump_stack+0x107/0x167 [ 3434.768845] should_fail.cold+0x5/0xa [ 3434.769343] ? create_object.isra.0+0x3a/0xa20 [ 3434.769930] should_failslab+0x5/0x20 [ 3434.770427] kmem_cache_alloc+0x5b/0x310 [ 3434.770956] ? mark_held_locks+0x9e/0xe0 [ 3434.771482] create_object.isra.0+0x3a/0xa20 [ 3434.772065] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3434.772721] kmem_cache_alloc+0x159/0x310 [ 3434.773262] xas_alloc+0x336/0x440 [ 3434.773721] xas_create+0x34a/0x10d0 [ 3434.774207] ? kernel_text_address+0xf2/0x120 [ 3434.774793] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3434.775468] xas_store+0x8c/0x1c40 [ 3434.775955] __xa_store+0x164/0x2d0 [ 3434.776426] ? xa_delete_node+0x280/0x280 [ 3434.776967] ? trace_hardirqs_on+0x5b/0x180 [ 3434.777526] xa_store+0x31/0x50 [ 3434.777953] __io_uring_add_tctx_node+0x1cf/0x520 [ 3434.778581] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3434.779253] ? alloc_fd+0x2e7/0x670 [ 3434.779752] io_uring_setup+0x1fbb/0x2980 [ 3434.780291] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3434.780939] ? wait_for_completion_io+0x270/0x270 [ 3434.781572] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3434.782249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3434.782913] do_syscall_64+0x33/0x40 [ 3434.783391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3434.784067] RIP: 0033:0x7fe147fe7b19 [ 3434.784549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3434.786912] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3434.787905] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3434.788822] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3434.789734] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3434.790653] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3434.791568] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3434.797834] FAULT_INJECTION: forcing a failure. [ 3434.797834] name failslab, interval 1, probability 0, space 0, times 0 [ 3434.799295] CPU: 0 PID: 17505 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 3434.800193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3434.801253] Call Trace: [ 3434.801596] dump_stack+0x107/0x167 [ 3434.802068] should_fail.cold+0x5/0xa [ 3434.802559] ? create_object.isra.0+0x3a/0xa20 [ 3434.803143] should_failslab+0x5/0x20 [ 3434.803651] kmem_cache_alloc+0x5b/0x310 [ 3434.804181] create_object.isra.0+0x3a/0xa20 [ 3434.804743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3434.805396] kmem_cache_alloc_trace+0x151/0x320 [ 3434.805999] ? lock_acquire+0x197/0x470 [ 3434.806515] sr_read_tochdr.isra.0+0x16e/0x350 [ 3434.807097] ? sr_read_tocentry.isra.0+0x6e0/0x6e0 [ 3434.807738] ? lock_acquire+0x197/0x470 [ 3434.808247] ? find_held_lock+0x2c/0x110 [ 3434.808771] ? __might_fault+0xd3/0x180 [ 3434.809283] sr_audio_ioctl+0x10f/0x2e0 [ 3434.809792] ? sr_select_speed+0x170/0x170 [ 3434.810348] ? _copy_from_user+0xfb/0x1b0 [ 3434.810880] cdrom_ioctl+0x134c/0x2bb0 [ 3434.811386] ? mmc_ioctl_cdrom_read_audio+0xc70/0xc70 [ 3434.812753] ? rpm_resume+0x564/0x1b10 [ 3434.813909] ? find_held_lock+0x2c/0x110 [ 3434.815104] ? __pm_runtime_resume+0xc5/0x180 [ 3434.816468] ? mark_held_locks+0x9e/0xe0 [ 3434.817657] ? blkdev_common_ioctl+0xfa/0x1930 [ 3434.819019] ? __pm_runtime_resume+0xc5/0x180 [ 3434.820351] sr_block_ioctl+0x145/0x1b0 [ 3434.821532] ? sr_block_compat_ioctl+0x1b0/0x1b0 [ 3434.822920] blkdev_ioctl+0x291/0x710 [ 3434.824056] ? blkdev_common_ioctl+0x1930/0x1930 [ 3434.825249] ? selinux_file_ioctl+0xb6/0x270 [ 3434.826361] block_ioctl+0xf9/0x140 [ 3434.827260] ? blkdev_read_iter+0x1c0/0x1c0 [ 3434.828492] __x64_sys_ioctl+0x19a/0x210 [ 3434.829507] do_syscall_64+0x33/0x40 [ 3434.830436] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3434.831763] RIP: 0033:0x7fbf35305b19 [ 3434.832698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3434.835521] RSP: 002b:00007fbf3287b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3434.836923] RAX: ffffffffffffffda RBX: 00007fbf35418f60 RCX: 00007fbf35305b19 [ 3434.838762] RDX: 00000000200000c0 RSI: 0000000000005305 RDI: 0000000000000003 [ 3434.840749] RBP: 00007fbf3287b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3434.842545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3434.844483] R13: 00007ffe0c02c2df R14: 00007fbf3287b300 R15: 0000000000022000 [ 3434.869019] loop5: detected capacity change from 0 to 135266304 11:04:34 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=00000000000000000012,smackfstransm', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 45) 11:04:34 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0de, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3434.963643] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3434.972076] FAULT_INJECTION: forcing a failure. [ 3434.972076] name failslab, interval 1, probability 0, space 0, times 0 [ 3434.975559] CPU: 0 PID: 17525 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3434.977665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3434.980169] Call Trace: [ 3434.980947] dump_stack+0x107/0x167 [ 3434.982023] should_fail.cold+0x5/0xa [ 3434.983156] ? xas_alloc+0x336/0x440 [ 3434.984269] should_failslab+0x5/0x20 [ 3434.985397] kmem_cache_alloc+0x5b/0x310 [ 3434.986598] xas_alloc+0x336/0x440 [ 3434.987665] xas_create+0x34a/0x10d0 [ 3434.988774] ? kernel_text_address+0xf2/0x120 [ 3434.990108] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3434.991681] xas_store+0x8c/0x1c40 [ 3434.992740] __xa_store+0x164/0x2d0 [ 3434.993817] ? xa_delete_node+0x280/0x280 [ 3434.995049] ? trace_hardirqs_on+0x5b/0x180 [ 3434.996346] xa_store+0x31/0x50 [ 3434.997322] __io_uring_add_tctx_node+0x1cf/0x520 [ 3434.998751] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3435.000320] ? alloc_fd+0x2e7/0x670 [ 3435.001401] io_uring_setup+0x1fbb/0x2980 [ 3435.002627] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3435.004141] ? wait_for_completion_io+0x270/0x270 [ 3435.005589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 11:04:34 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:34 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:04:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 4) [ 3435.007148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3435.012199] do_syscall_64+0x33/0x40 [ 3435.012763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3435.013526] RIP: 0033:0x7fe147fe7b19 [ 3435.014081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3435.016752] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3435.017871] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3435.018920] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3435.019980] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3435.021032] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3435.022077] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3435.025570] loop3: detected capacity change from 0 to 135266304 11:04:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3435.096076] FAULT_INJECTION: forcing a failure. [ 3435.096076] name failslab, interval 1, probability 0, space 0, times 0 [ 3435.097572] CPU: 0 PID: 17531 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 3435.098461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3435.099514] Call Trace: [ 3435.100211] dump_stack+0x107/0x167 [ 3435.101125] should_fail.cold+0x5/0xa [ 3435.102094] ? bio_alloc_bioset+0x3b7/0x600 [ 3435.103178] should_failslab+0x5/0x20 [ 3435.103861] __kmalloc+0x72/0x390 [ 3435.104311] bio_alloc_bioset+0x3b7/0x600 [ 3435.104845] ? bvec_alloc+0x2f0/0x2f0 [ 3435.105343] blk_rq_map_kern+0x5be/0x9e0 [ 3435.105871] ? blk_rq_append_bio+0x850/0x850 [ 3435.106431] ? memset+0x20/0x50 [ 3435.106860] ? scsi_req_init+0x18/0xb0 [ 3435.107360] ? scsi_initialize_rq+0x16/0xb0 [ 3435.108032] __scsi_execute+0x4e7/0x630 [ 3435.108551] sr_do_ioctl+0x196/0x710 [ 3435.109048] ? sr_block_open+0x410/0x410 [ 3435.109570] ? kasan_unpoison_shadow+0x33/0x50 [ 3435.110154] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3435.110807] sr_read_tochdr.isra.0+0x1c9/0x350 [ 3435.111392] ? sr_read_tocentry.isra.0+0x6e0/0x6e0 [ 3435.112045] ? __might_fault+0xd3/0x180 [ 3435.112554] sr_audio_ioctl+0x10f/0x2e0 [ 3435.113068] ? sr_select_speed+0x170/0x170 [ 3435.113620] ? _copy_from_user+0xfb/0x1b0 [ 3435.114155] cdrom_ioctl+0x134c/0x2bb0 [ 3435.114656] ? mmc_ioctl_cdrom_read_audio+0xc70/0xc70 [ 3435.115323] ? rpm_resume+0x564/0x1b10 [ 3435.115842] ? find_held_lock+0x2c/0x110 [ 3435.116371] ? __pm_runtime_resume+0xc5/0x180 [ 3435.116949] ? mark_held_locks+0x9e/0xe0 [ 3435.117468] ? blkdev_common_ioctl+0xfa/0x1930 [ 3435.118060] ? __pm_runtime_resume+0xc5/0x180 [ 3435.118635] sr_block_ioctl+0x145/0x1b0 [ 3435.119146] ? sr_block_compat_ioctl+0x1b0/0x1b0 [ 3435.119766] blkdev_ioctl+0x291/0x710 [ 3435.120253] ? blkdev_common_ioctl+0x1930/0x1930 [ 3435.120862] ? selinux_file_ioctl+0xb6/0x270 [ 3435.121433] block_ioctl+0xf9/0x140 [ 3435.121897] ? blkdev_read_iter+0x1c0/0x1c0 [ 3435.122452] __x64_sys_ioctl+0x19a/0x210 [ 3435.122976] do_syscall_64+0x33/0x40 [ 3435.123455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3435.124125] RIP: 0033:0x7fbf35305b19 [ 3435.124600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3435.126953] RSP: 002b:00007fbf3287b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3435.127946] RAX: ffffffffffffffda RBX: 00007fbf35418f60 RCX: 00007fbf35305b19 [ 3435.128853] RDX: 00000000200000c0 RSI: 0000000000005305 RDI: 0000000000000003 [ 3435.129768] RBP: 00007fbf3287b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3435.130678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3435.131594] R13: 00007ffe0c02c2df R14: 00007fbf3287b300 R15: 0000000000022000 11:04:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',func=CREDS_CHECK,smackfsfloor=\x00,smackfshat=,pcr=00000000000000000012,smackfstransm', @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3435.199885] loop5: detected capacity change from 0 to 135266304 11:04:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 46) 11:04:34 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/191, 0xbf}], 0x5}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:34 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0df, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3435.218226] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3435.230611] FAULT_INJECTION: forcing a failure. [ 3435.230611] name failslab, interval 1, probability 0, space 0, times 0 [ 3435.232166] CPU: 0 PID: 17547 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3435.233063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3435.234120] Call Trace: [ 3435.234469] dump_stack+0x107/0x167 [ 3435.234943] should_fail.cold+0x5/0xa [ 3435.235464] ? create_object.isra.0+0x3a/0xa20 [ 3435.236088] should_failslab+0x5/0x20 [ 3435.236607] kmem_cache_alloc+0x5b/0x310 [ 3435.237130] ? mark_held_locks+0x9e/0xe0 [ 3435.237654] create_object.isra.0+0x3a/0xa20 [ 3435.238216] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3435.238869] kmem_cache_alloc+0x159/0x310 [ 3435.239431] xas_alloc+0x336/0x440 [ 3435.239910] xas_create+0x34a/0x10d0 [ 3435.240435] ? kernel_text_address+0xf2/0x120 [ 3435.241012] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3435.241686] xas_store+0x8c/0x1c40 [ 3435.242154] __xa_store+0x164/0x2d0 [ 3435.242623] ? xa_delete_node+0x280/0x280 [ 3435.243192] ? trace_hardirqs_on+0x5b/0x180 [ 3435.243765] xa_store+0x31/0x50 [ 3435.244235] __io_uring_add_tctx_node+0x1cf/0x520 [ 3435.244858] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3435.245531] ? alloc_fd+0x2e7/0x670 [ 3435.246023] io_uring_setup+0x1fbb/0x2980 [ 3435.246577] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3435.247273] ? wait_for_completion_io+0x270/0x270 [ 3435.247927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3435.248601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3435.249270] do_syscall_64+0x33/0x40 [ 3435.249750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3435.250434] RIP: 0033:0x7fe147fe7b19 [ 3435.250915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3435.253298] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3435.254278] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3435.255193] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3435.256126] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3435.257038] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3435.257952] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:04:34 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syslog(0x3, 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) [ 3435.319298] loop3: detected capacity change from 0 to 135266304 11:04:50 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 5) 11:04:50 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:04:50 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e26", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:50 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0xbd33) 11:04:50 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:50 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:50 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 47) 11:04:50 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x8001, 0x0, 0x80000001, 0x0, 0x1}, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3450.916996] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3450.921803] FAULT_INJECTION: forcing a failure. [ 3450.921803] name failslab, interval 1, probability 0, space 0, times 0 [ 3450.922941] FAULT_INJECTION: forcing a failure. [ 3450.922941] name failslab, interval 1, probability 0, space 0, times 0 [ 3450.923412] CPU: 1 PID: 17566 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 3450.925619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3450.926676] Call Trace: [ 3450.927022] dump_stack+0x107/0x167 [ 3450.927492] should_fail.cold+0x5/0xa [ 3450.931998] ? create_object.isra.0+0x3a/0xa20 [ 3450.932588] should_failslab+0x5/0x20 [ 3450.933082] kmem_cache_alloc+0x5b/0x310 [ 3450.933606] create_object.isra.0+0x3a/0xa20 [ 3450.934167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3450.934936] __kmalloc+0x16e/0x390 [ 3450.935395] bio_alloc_bioset+0x3b7/0x600 [ 3450.935947] ? bvec_alloc+0x2f0/0x2f0 [ 3450.936445] blk_rq_map_kern+0x5be/0x9e0 [ 3450.936975] ? blk_rq_append_bio+0x850/0x850 [ 3450.937534] ? memset+0x20/0x50 [ 3450.937958] ? scsi_req_init+0x18/0xb0 [ 3450.938458] ? scsi_initialize_rq+0x16/0xb0 [ 3450.939012] __scsi_execute+0x4e7/0x630 [ 3450.939524] sr_do_ioctl+0x196/0x710 [ 3450.940019] ? sr_block_open+0x410/0x410 [ 3450.940537] ? kasan_unpoison_shadow+0x33/0x50 [ 3450.941120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3450.941770] sr_read_tochdr.isra.0+0x1c9/0x350 [ 3450.942353] ? sr_read_tocentry.isra.0+0x6e0/0x6e0 [ 3450.942987] ? __might_fault+0xd3/0x180 [ 3450.943498] sr_audio_ioctl+0x10f/0x2e0 [ 3450.944021] ? sr_select_speed+0x170/0x170 [ 3450.944653] ? _copy_from_user+0xfb/0x1b0 [ 3450.945259] cdrom_ioctl+0x134c/0x2bb0 [ 3450.945826] ? mmc_ioctl_cdrom_read_audio+0xc70/0xc70 [ 3450.946586] ? rpm_resume+0x564/0x1b10 [ 3450.947148] ? find_held_lock+0x2c/0x110 [ 3450.947747] ? __pm_runtime_resume+0xc5/0x180 [ 3450.948375] ? mark_held_locks+0x9e/0xe0 [ 3450.948965] ? blkdev_common_ioctl+0xfa/0x1930 [ 3450.949640] ? __pm_runtime_resume+0xc5/0x180 [ 3450.950290] sr_block_ioctl+0x145/0x1b0 [ 3450.950870] ? sr_block_compat_ioctl+0x1b0/0x1b0 [ 3450.951555] blkdev_ioctl+0x291/0x710 [ 3450.952077] ? blkdev_common_ioctl+0x1930/0x1930 [ 3450.952683] ? selinux_file_ioctl+0xb6/0x270 [ 3450.953252] block_ioctl+0xf9/0x140 [ 3450.953716] ? blkdev_read_iter+0x1c0/0x1c0 [ 3450.954267] __x64_sys_ioctl+0x19a/0x210 [ 3450.954788] do_syscall_64+0x33/0x40 [ 3450.955265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3450.955927] RIP: 0033:0x7fbf35305b19 [ 3450.956403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3450.958739] RSP: 002b:00007fbf3287b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3450.959707] RAX: ffffffffffffffda RBX: 00007fbf35418f60 RCX: 00007fbf35305b19 [ 3450.960700] RDX: 00000000200000c0 RSI: 0000000000005305 RDI: 0000000000000003 [ 3450.961740] RBP: 00007fbf3287b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3450.962777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3450.963820] R13: 00007ffe0c02c2df R14: 00007fbf3287b300 R15: 0000000000022000 [ 3450.964754] CPU: 0 PID: 17577 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3450.965680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3450.966750] Call Trace: [ 3450.967095] dump_stack+0x107/0x167 [ 3450.967565] should_fail.cold+0x5/0xa [ 3450.968101] ? xas_alloc+0x336/0x440 [ 3450.968645] should_failslab+0x5/0x20 [ 3450.969197] kmem_cache_alloc+0x5b/0x310 [ 3450.969790] xas_alloc+0x336/0x440 [ 3450.970308] xas_create+0x34a/0x10d0 [ 3450.970854] ? kernel_text_address+0xf2/0x120 [ 3450.971507] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3450.972251] xas_store+0x8c/0x1c40 [ 3450.972776] __xa_store+0x164/0x2d0 [ 3450.973300] ? xa_delete_node+0x280/0x280 [ 3450.973898] ? trace_hardirqs_on+0x5b/0x180 [ 3450.974526] xa_store+0x31/0x50 [ 3450.975006] __io_uring_add_tctx_node+0x1cf/0x520 [ 3450.975700] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3450.979662] loop5: detected capacity change from 0 to 135266304 [ 3450.980403] ? alloc_fd+0x2e7/0x670 [ 3450.980434] io_uring_setup+0x1fbb/0x2980 [ 3450.982237] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3450.982250] ? wait_for_completion_io+0x270/0x270 [ 3450.982280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3450.982295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3450.982312] do_syscall_64+0x33/0x40 [ 3450.989518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3450.990261] RIP: 0033:0x7fe147fe7b19 [ 3450.990801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3450.997383] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3450.998480] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3450.999506] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3451.000508] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3451.001533] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3451.002558] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3451.023149] loop3: detected capacity change from 0 to 135266304 11:04:50 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:50 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e1, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:04:50 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e26", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:50 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:04:50 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3451.188748] loop3: detected capacity change from 0 to 135266304 11:05:05 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:05:05 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e26", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:05 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:05:05 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 48) 11:05:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 6) 11:05:05 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/de', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:05 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:05 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080)="9b092f6d4da7d173fbc970301e3efff493a04ced5782a5cd6755bbcc95af47e62284", 0x22, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r5, 0x5312, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r6, 0x5312, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x8000, r5, &(0x7f0000000100)="7025dc8b740ab008f8b8df3c6e52a66398627052bbb4bb966ee32c05756a3d1681dc0598c9244e971a12461dfb234cdb11f2be9117f0c7ce3b3666acfee97a9c77188187850ff0b4c7d33ca6727a5b832a92f59727235ae3c4e80c18fd395a0874020dc78ba7fe1f00c852a282ba114192bc1a59882ef1616b27d00f5409a99bdc2426456329b4804c35ac8f487afc6a56c29f7ea133367da814ca2ffbb20b62d1debb93281dbc7ef0d09bb225cf17e5a218e5d4a5ac676571a2b74e97d6b2c2a3fa5c1610ebc9c2b31f27252a84d637a4228180", 0xd4, 0x1, 0x0, 0x2, r6}]) [ 3466.740946] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3466.745204] FAULT_INJECTION: forcing a failure. [ 3466.745204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3466.746911] CPU: 0 PID: 17618 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 3466.747927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3466.747932] Call Trace: [ 3466.747966] dump_stack+0x107/0x167 [ 3466.747984] should_fail.cold+0x5/0xa [ 3466.748006] __alloc_pages_nodemask+0x182/0x600 [ 3466.748025] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3466.748041] ? bio_init+0x76/0x130 [ 3466.748063] ? bvec_alloc+0x2f0/0x2f0 [ 3466.748085] alloc_pages_current+0x187/0x280 [ 3466.748105] blk_rq_map_kern+0x734/0x9e0 [ 3466.748130] ? blk_rq_append_bio+0x850/0x850 [ 3466.748142] ? memset+0x20/0x50 [ 3466.748157] ? scsi_req_init+0x18/0xb0 [ 3466.748172] ? scsi_initialize_rq+0x16/0xb0 [ 3466.748191] __scsi_execute+0x4e7/0x630 [ 3466.748212] sr_do_ioctl+0x196/0x710 [ 3466.748238] ? sr_block_open+0x410/0x410 [ 3466.748253] ? kasan_unpoison_shadow+0x33/0x50 [ 3466.748267] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3466.748286] sr_read_tochdr.isra.0+0x1c9/0x350 [ 3466.748299] ? sr_read_tocentry.isra.0+0x6e0/0x6e0 [ 3466.748320] ? __might_fault+0xd3/0x180 [ 3466.748333] sr_audio_ioctl+0x10f/0x2e0 [ 3466.748343] ? sr_select_speed+0x170/0x170 [ 3466.748363] ? _copy_from_user+0xfb/0x1b0 [ 3466.748380] cdrom_ioctl+0x134c/0x2bb0 [ 3466.748394] ? mmc_ioctl_cdrom_read_audio+0xc70/0xc70 [ 3466.748418] ? rpm_resume+0x564/0x1b10 [ 3466.748432] ? find_held_lock+0x2c/0x110 [ 3466.748447] ? __pm_runtime_resume+0xc5/0x180 [ 3466.748462] ? mark_held_locks+0x9e/0xe0 [ 3466.748474] ? blkdev_common_ioctl+0xfa/0x1930 [ 3466.748494] ? __pm_runtime_resume+0xc5/0x180 [ 3466.748508] sr_block_ioctl+0x145/0x1b0 [ 3466.748526] ? sr_block_compat_ioctl+0x1b0/0x1b0 [ 3466.748536] blkdev_ioctl+0x291/0x710 [ 3466.748549] ? blkdev_common_ioctl+0x1930/0x1930 [ 3466.748565] ? selinux_file_ioctl+0xb6/0x270 [ 3466.748581] block_ioctl+0xf9/0x140 [ 3466.748591] ? blkdev_read_iter+0x1c0/0x1c0 [ 3466.748606] __x64_sys_ioctl+0x19a/0x210 [ 3466.748625] do_syscall_64+0x33/0x40 [ 3466.748640] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3466.748651] RIP: 0033:0x7fbf35305b19 [ 3466.748667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3466.748675] RSP: 002b:00007fbf3287b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3466.748692] RAX: ffffffffffffffda RBX: 00007fbf35418f60 RCX: 00007fbf35305b19 [ 3466.748701] RDX: 00000000200000c0 RSI: 0000000000005305 RDI: 0000000000000003 [ 3466.748710] RBP: 00007fbf3287b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3466.748718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3466.748736] R13: 00007ffe0c02c2df R14: 00007fbf3287b300 R15: 0000000000022000 [ 3466.767242] FAULT_INJECTION: forcing a failure. [ 3466.767242] name failslab, interval 1, probability 0, space 0, times 0 [ 3466.801506] CPU: 1 PID: 17627 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3466.802417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3466.803498] Call Trace: [ 3466.803851] dump_stack+0x107/0x167 [ 3466.804905] should_fail.cold+0x5/0xa [ 3466.805871] ? create_object.isra.0+0x3a/0xa20 [ 3466.807054] should_failslab+0x5/0x20 [ 3466.808021] kmem_cache_alloc+0x5b/0x310 [ 3466.808563] ? mark_held_locks+0x9e/0xe0 [ 3466.809098] create_object.isra.0+0x3a/0xa20 [ 3466.809681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3466.810352] kmem_cache_alloc+0x159/0x310 [ 3466.810911] xas_alloc+0x336/0x440 [ 3466.811380] xas_create+0x34a/0x10d0 [ 3466.811880] ? kernel_text_address+0xf2/0x120 [ 3466.813241] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3466.814629] xas_store+0x8c/0x1c40 [ 3466.815559] __xa_store+0x164/0x2d0 [ 3466.816609] ? xa_delete_node+0x280/0x280 [ 3466.817705] ? trace_hardirqs_on+0x5b/0x180 [ 3466.818867] xa_store+0x31/0x50 [ 3466.819830] __io_uring_add_tctx_node+0x1cf/0x520 [ 3466.819906] loop5: detected capacity change from 0 to 135266304 [ 3466.820765] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3466.820780] ? alloc_fd+0x2e7/0x670 [ 3466.820804] io_uring_setup+0x1fbb/0x2980 [ 3466.820825] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3466.820838] ? wait_for_completion_io+0x270/0x270 [ 3466.820872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3466.825190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3466.825863] do_syscall_64+0x33/0x40 [ 3466.826350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3466.827031] RIP: 0033:0x7fe147fe7b19 [ 3466.827526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3466.829920] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3466.830913] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3466.831835] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3466.836066] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3466.837005] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3466.837939] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:05:06 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3466.853402] loop3: detected capacity change from 0 to 135266304 11:05:06 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:05:06 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c66", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:06 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 7) 11:05:06 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:06 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3467.062682] loop3: detected capacity change from 0 to 135266304 11:05:06 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 49) 11:05:06 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3467.111623] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3467.116363] FAULT_INJECTION: forcing a failure. [ 3467.116363] name failslab, interval 1, probability 0, space 0, times 0 [ 3467.117898] CPU: 0 PID: 17659 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3467.118780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3467.119843] Call Trace: [ 3467.120206] dump_stack+0x107/0x167 [ 3467.120680] should_fail.cold+0x5/0xa [ 3467.121173] ? xas_alloc+0x336/0x440 [ 3467.121657] should_failslab+0x5/0x20 [ 3467.122150] kmem_cache_alloc+0x5b/0x310 [ 3467.122672] xas_alloc+0x336/0x440 [ 3467.123128] xas_create+0x34a/0x10d0 [ 3467.123624] ? kernel_text_address+0xf2/0x120 [ 3467.124217] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3467.124892] xas_store+0x8c/0x1c40 [ 3467.125361] __xa_store+0x164/0x2d0 [ 3467.125831] ? xa_delete_node+0x280/0x280 [ 3467.126372] ? trace_hardirqs_on+0x5b/0x180 [ 3467.126927] xa_store+0x31/0x50 [ 3467.127362] __io_uring_add_tctx_node+0x1cf/0x520 [ 3467.132015] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3467.132693] ? alloc_fd+0x2e7/0x670 [ 3467.133169] io_uring_setup+0x1fbb/0x2980 [ 3467.133712] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3467.134361] ? wait_for_completion_io+0x270/0x270 [ 3467.134994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3467.135667] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3467.136347] do_syscall_64+0x33/0x40 [ 3467.136826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3467.137481] RIP: 0033:0x7fe147fe7b19 [ 3467.137958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3467.140320] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3467.141293] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3467.142204] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3467.143114] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3467.144036] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3467.144956] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:05:22 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {0x0}], 0x5}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c66", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:22 executing program 4: r0 = request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$revoke(0x3, r0) r1 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='syz', 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, r1) keyctl$revoke(0x3, r2) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r3, 0x5305, &(0x7f00000000c0)) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) 11:05:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) 11:05:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:05:22 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 50) 11:05:22 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:05:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/de', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3483.040374] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3483.047866] FAULT_INJECTION: forcing a failure. [ 3483.047866] name failslab, interval 1, probability 0, space 0, times 0 [ 3483.049328] CPU: 1 PID: 17677 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3483.050211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3483.051267] Call Trace: [ 3483.051613] dump_stack+0x107/0x167 [ 3483.052083] should_fail.cold+0x5/0xa [ 3483.052596] ? create_object.isra.0+0x3a/0xa20 [ 3483.053187] should_failslab+0x5/0x20 [ 3483.053672] kmem_cache_alloc+0x5b/0x310 [ 3483.054193] ? mark_held_locks+0x9e/0xe0 [ 3483.054722] create_object.isra.0+0x3a/0xa20 [ 3483.055285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3483.055938] kmem_cache_alloc+0x159/0x310 [ 3483.056495] xas_alloc+0x336/0x440 [ 3483.056954] xas_create+0x34a/0x10d0 [ 3483.057439] ? kernel_text_address+0xf2/0x120 [ 3483.058015] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3483.058688] xas_store+0x8c/0x1c40 [ 3483.059155] __xa_store+0x164/0x2d0 [ 3483.059625] ? xa_delete_node+0x280/0x280 [ 3483.060179] ? trace_hardirqs_on+0x5b/0x180 [ 3483.060740] xa_store+0x31/0x50 [ 3483.061166] __io_uring_add_tctx_node+0x1cf/0x520 [ 3483.061792] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3483.062463] ? alloc_fd+0x2e7/0x670 [ 3483.062939] io_uring_setup+0x1fbb/0x2980 [ 3483.063478] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3483.064135] ? wait_for_completion_io+0x270/0x270 [ 3483.064798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3483.065475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3483.066137] do_syscall_64+0x33/0x40 [ 3483.066616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3483.067273] RIP: 0033:0x7fe147fe7b19 [ 3483.067748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3483.070111] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3483.071086] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3483.071995] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3483.076954] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3483.076963] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3483.076971] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3483.089467] loop5: detected capacity change from 0 to 135266304 [ 3483.115967] loop3: detected capacity change from 0 to 135266304 11:05:22 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 51) 11:05:22 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {0x0}], 0x5}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/de', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3483.163048] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3483.173566] FAULT_INJECTION: forcing a failure. [ 3483.173566] name failslab, interval 1, probability 0, space 0, times 0 [ 3483.175092] CPU: 1 PID: 17697 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3483.175975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3483.177050] Call Trace: [ 3483.177394] dump_stack+0x107/0x167 [ 3483.177866] should_fail.cold+0x5/0xa [ 3483.178356] ? xas_alloc+0x336/0x440 [ 3483.178839] should_failslab+0x5/0x20 [ 3483.179328] kmem_cache_alloc+0x5b/0x310 [ 3483.179851] xas_alloc+0x336/0x440 [ 3483.180328] xas_create+0x34a/0x10d0 [ 3483.180820] ? kernel_text_address+0xf2/0x120 [ 3483.181396] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3483.182070] xas_store+0x8c/0x1c40 [ 3483.182542] __xa_store+0x164/0x2d0 [ 3483.183009] ? xa_delete_node+0x280/0x280 [ 3483.183544] ? trace_hardirqs_on+0x5b/0x180 [ 3483.184101] xa_store+0x31/0x50 [ 3483.184543] __io_uring_add_tctx_node+0x1cf/0x520 [ 3483.185161] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3483.185829] ? alloc_fd+0x2e7/0x670 [ 3483.186304] io_uring_setup+0x1fbb/0x2980 [ 3483.186841] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3483.187496] ? wait_for_completion_io+0x270/0x270 [ 3483.188137] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3483.188812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3483.189472] do_syscall_64+0x33/0x40 [ 3483.189948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3483.190601] RIP: 0033:0x7fe147fe7b19 [ 3483.191078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3483.193435] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3483.194414] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3483.195322] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3483.196249] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3483.197161] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3483.198072] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:05:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x2, &(0x7f00000000c0)) 11:05:22 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:05:22 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {0x0}], 0x5}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3483.273935] loop5: detected capacity change from 0 to 135266304 11:05:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c66", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x301, &(0x7f00000000c0)) 11:05:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3483.372605] loop3: detected capacity change from 0 to 135266304 [ 3483.432811] loop5: detected capacity change from 0 to 135266304 11:05:38 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x125d, &(0x7f00000000c0)) 11:05:38 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 52) 11:05:38 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) 11:05:38 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:38 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:05:38 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x450c0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x85}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000805}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r5, 0x491, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r8, 0x5305, &(0x7f00000000c0)) 11:05:38 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {0x0}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3499.254781] loop5: detected capacity change from 0 to 135266304 [ 3499.293000] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3499.301101] loop3: detected capacity change from 0 to 135266304 [ 3499.312631] FAULT_INJECTION: forcing a failure. [ 3499.312631] name failslab, interval 1, probability 0, space 0, times 0 [ 3499.314236] CPU: 0 PID: 17755 Comm: syz-executor.0 Not tainted 5.10.238 #1 11:05:38 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {0x0}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3499.315129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3499.316218] Call Trace: [ 3499.316581] dump_stack+0x107/0x167 [ 3499.317057] should_fail.cold+0x5/0xa [ 3499.317556] ? create_object.isra.0+0x3a/0xa20 [ 3499.318166] should_failslab+0x5/0x20 [ 3499.318667] kmem_cache_alloc+0x5b/0x310 [ 3499.319183] ? mark_held_locks+0x9e/0xe0 [ 3499.319680] create_object.isra.0+0x3a/0xa20 [ 3499.324581] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3499.325251] kmem_cache_alloc+0x159/0x310 [ 3499.325808] xas_alloc+0x336/0x440 [ 3499.326284] xas_create+0x34a/0x10d0 [ 3499.326782] ? kernel_text_address+0xf2/0x120 [ 3499.327378] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3499.328075] xas_store+0x8c/0x1c40 [ 3499.328570] __xa_store+0x164/0x2d0 [ 3499.329055] ? xa_delete_node+0x280/0x280 [ 3499.329614] ? trace_hardirqs_on+0x5b/0x180 [ 3499.330190] xa_store+0x31/0x50 [ 3499.330632] __io_uring_add_tctx_node+0x1cf/0x520 [ 3499.331268] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3499.331953] ? alloc_fd+0x2e7/0x670 [ 3499.332463] io_uring_setup+0x1fbb/0x2980 [ 3499.333015] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3499.333678] ? wait_for_completion_io+0x270/0x270 [ 3499.334329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3499.335017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3499.335695] do_syscall_64+0x33/0x40 [ 3499.336191] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3499.336874] RIP: 0033:0x7fe147fe7b19 [ 3499.337376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3499.339774] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3499.340810] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3499.341756] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3499.342710] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3499.343660] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3499.348625] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:05:38 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {0x0}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:38 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:38 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:05:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x125e, &(0x7f00000000c0)) 11:05:38 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x2, 0xc3}) [ 3499.574696] loop3: detected capacity change from 0 to 135266304 11:05:38 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0e9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:05:38 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:38 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 53) [ 3499.643928] loop5: detected capacity change from 0 to 135266304 [ 3499.653511] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3499.706516] FAULT_INJECTION: forcing a failure. [ 3499.706516] name failslab, interval 1, probability 0, space 0, times 0 [ 3499.708007] CPU: 0 PID: 17791 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3499.708906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3499.710013] Call Trace: [ 3499.710369] dump_stack+0x107/0x167 [ 3499.710842] should_fail.cold+0x5/0xa [ 3499.711381] ? xas_alloc+0x336/0x440 [ 3499.711868] should_failslab+0x5/0x20 [ 3499.712368] kmem_cache_alloc+0x5b/0x310 [ 3499.712892] xas_alloc+0x336/0x440 [ 3499.713348] xas_create+0x34a/0x10d0 [ 3499.713841] ? kernel_text_address+0xf2/0x120 [ 3499.714419] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3499.715093] xas_store+0x8c/0x1c40 [ 3499.715561] __xa_store+0x164/0x2d0 [ 3499.716030] ? xa_delete_node+0x280/0x280 [ 3499.719536] ? trace_hardirqs_on+0x5b/0x180 [ 3499.720225] xa_store+0x31/0x50 [ 3499.720751] __io_uring_add_tctx_node+0x1cf/0x520 [ 3499.721541] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3499.722203] ? alloc_fd+0x2e7/0x670 [ 3499.722839] io_uring_setup+0x1fbb/0x2980 [ 3499.723367] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3499.724151] ? wait_for_completion_io+0x270/0x270 [ 3499.724999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3499.725839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3499.726545] do_syscall_64+0x33/0x40 [ 3499.727146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3499.727965] RIP: 0033:0x7fe147fe7b19 [ 3499.728536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3499.731320] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3499.732538] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3499.733578] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3499.734621] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3499.735695] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3499.736815] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:05:54 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,eu', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:54 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:54 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b42, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0xad7, 0x218000) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x400, 0xffffffffffffffff, &(0x7f0000000040)="6afc3aac4c3d3e71f591413b4ef059e163aedbd2aa4e3ac4a2b9135dd7f1d6f64e6959fbe6b0d227554c3d293a7a5f6e59d63d64190a55cb1d5918132b5c4f2547f2da06a8a31350d07b439a76e607b16363b831e470ee8c", 0x58, 0x20, 0x0, 0x0, r1}, &(0x7f0000000180)) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x202400, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r5, 0x5312, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = dup3(r0, r0, 0x80000) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) io_submit(0x0, 0x6, &(0x7f0000000740)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x79, r2, &(0x7f0000000200)="ed6b608f240f53c8a5bd7185ee04ee18db2e70343ccad5331142ef5b14bb8a4c9d5d89c668ec2a477102d7ccd5951361ebcca0fcc77b68b7cbbd4b63bea149003582f9010364", 0x46, 0x3, 0x0, 0x0, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x9, r3, &(0x7f00000002c0)="422872181b0da801895a102acfc01b47c8951ba5225da0527d2b79e99e0a5154bfe06c44d112ef025bf4ead78f420b7304ad3772ecb811edf59a2ef0ac28125a3ffb7a5dddfb7cf514f801c4", 0x4c, 0x1, 0x0, 0x1, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000380)="40500ea4112a61f023ddf802f314ba3413f7e738f6b2c4862acdc866af47d8c3d20ead6bde54fe7070aa2c2d200df80716dc9a8418eb7442312854e9da4cc8c0f191a122c6c14e99fd4b52f3ab2ddfe3b10055d007545a9218293edf961912633f63b0c3f8af10bdd7ec44dd9b6017466f316cc2fc01905cccbf4ce8e4a32f765901f7fcb0", 0x85, 0xcd, 0x0, 0x3, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x100, r0, &(0x7f0000000480), 0x0, 0x81, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0xe1, r6, &(0x7f0000000540)="b8ff9c3fa011ce04a2d50ff85c84d421d791b9431c86af53a520323a99a2a6102ba5d03dd7a19e8ac741b0faf241c3c6162a4de1e14a083cb6717e273254428fad782f7c2ec0652599328ee25146b8acd8b22207f3a7346dd1b9656e45efeb1b28f4f1f72d584340d8db48aac94eebc86ad2b4f616ac83dd6348f5928f40700cde6be0efcebf669c4bdcfa1d", 0x8c, 0x8, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x4, r7, &(0x7f0000000640)="f7c7136d4645cd64cab7315cafed0b63b154342306de34170f79cb410403f38b5a2254af6f16efdad92971ebd6250bb7620b5f878b5631cad54079e44ba96648b4f1e0620904b82807e81a7d75a0e72a0e8d2037d24a9a2ac907bad1c32a4ddb45fc8dc37a2a53cd776379", 0x6b, 0xd7, 0x0, 0x3, r8}]) r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 11:05:54 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x125f, &(0x7f00000000c0)) 11:05:54 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) 11:05:54 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 54) 11:05:54 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ea, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3515.448920] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3515.455102] FAULT_INJECTION: forcing a failure. [ 3515.455102] name failslab, interval 1, probability 0, space 0, times 0 [ 3515.456576] CPU: 0 PID: 17814 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3515.457485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3515.458585] Call Trace: [ 3515.458952] dump_stack+0x107/0x167 [ 3515.459426] should_fail.cold+0x5/0xa [ 3515.459919] ? ___slab_alloc+0x155/0x700 [ 3515.460446] ? create_object.isra.0+0x3a/0xa20 [ 3515.461060] should_failslab+0x5/0x20 [ 3515.461554] kmem_cache_alloc+0x5b/0x310 [ 3515.462082] create_object.isra.0+0x3a/0xa20 [ 3515.462647] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3515.463303] kmem_cache_alloc+0x159/0x310 [ 3515.463858] xas_alloc+0x336/0x440 [ 3515.464320] xas_create+0x34a/0x10d0 [ 3515.464824] ? kernel_text_address+0xf2/0x120 [ 3515.465406] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3515.466084] xas_store+0x8c/0x1c40 [ 3515.466557] __xa_store+0x164/0x2d0 [ 3515.467026] ? xa_delete_node+0x280/0x280 [ 3515.467577] ? trace_hardirqs_on+0x5b/0x180 [ 3515.468136] xa_store+0x31/0x50 [ 3515.468579] __io_uring_add_tctx_node+0x1cf/0x520 [ 3515.469209] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3515.469884] ? alloc_fd+0x2e7/0x670 [ 3515.470375] io_uring_setup+0x1fbb/0x2980 [ 3515.470937] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3515.471686] ? wait_for_completion_io+0x270/0x270 [ 3515.472415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3515.477184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3515.477874] do_syscall_64+0x33/0x40 [ 3515.478352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3515.479025] RIP: 0033:0x7fe147fe7b19 [ 3515.479503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3515.482009] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 11:05:54 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0eb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3515.483080] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3515.483995] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3515.484919] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3515.489001] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3515.489927] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3515.501978] loop3: detected capacity change from 0 to 135266304 [ 3515.511998] loop5: detected capacity change from 0 to 135266304 11:05:54 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 55) 11:05:54 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,eu', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:05:54 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) [ 3515.597810] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3515.603691] FAULT_INJECTION: forcing a failure. [ 3515.603691] name failslab, interval 1, probability 0, space 0, times 0 [ 3515.606809] CPU: 1 PID: 17831 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3515.608615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3515.610699] Call Trace: [ 3515.611357] dump_stack+0x107/0x167 [ 3515.612252] should_fail.cold+0x5/0xa [ 3515.613363] ? xas_alloc+0x336/0x440 [ 3515.614296] should_failslab+0x5/0x20 [ 3515.615247] kmem_cache_alloc+0x5b/0x310 [ 3515.616279] xas_alloc+0x336/0x440 [ 3515.617310] xas_create+0x34a/0x10d0 [ 3515.618228] ? kernel_text_address+0xf2/0x120 [ 3515.619327] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3515.620670] xas_store+0x8c/0x1c40 [ 3515.621571] __xa_store+0x164/0x2d0 [ 3515.622482] ? xa_delete_node+0x280/0x280 [ 3515.623532] ? trace_hardirqs_on+0x5b/0x180 [ 3515.624670] xa_store+0x31/0x50 [ 3515.625481] __io_uring_add_tctx_node+0x1cf/0x520 [ 3515.626665] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3515.627955] ? alloc_fd+0x2e7/0x670 [ 3515.628945] io_uring_setup+0x1fbb/0x2980 [ 3515.629993] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3515.631268] ? wait_for_completion_io+0x270/0x270 [ 3515.632524] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3515.634065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3515.635335] do_syscall_64+0x33/0x40 [ 3515.636265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3515.637762] RIP: 0033:0x7fe147fe7b19 [ 3515.638695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3515.641965] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3515.642947] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3515.643868] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3515.645192] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3515.646994] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3515.648879] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3515.690268] loop5: detected capacity change from 0 to 135266304 11:06:10 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ec, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:06:10 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, 0x0) 11:06:10 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:10 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 56) 11:06:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x1260, &(0x7f00000000c0)) 11:06:10 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e6572", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3531.146304] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3531.155243] FAULT_INJECTION: forcing a failure. [ 3531.155243] name failslab, interval 1, probability 0, space 0, times 0 [ 3531.156732] CPU: 0 PID: 17853 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3531.157644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3531.158721] Call Trace: [ 3531.159073] dump_stack+0x107/0x167 [ 3531.159546] should_fail.cold+0x5/0xa 11:06:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,eu', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd93e, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5312, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0xa20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r2, 0x5305, &(0x7f00000000c0)) [ 3531.160040] ? create_object.isra.0+0x3a/0xa20 [ 3531.164920] should_failslab+0x5/0x20 [ 3531.165416] kmem_cache_alloc+0x5b/0x310 [ 3531.165950] ? mark_held_locks+0x9e/0xe0 [ 3531.166474] create_object.isra.0+0x3a/0xa20 [ 3531.167061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3531.167710] kmem_cache_alloc+0x159/0x310 [ 3531.168299] xas_alloc+0x336/0x440 [ 3531.168314] xas_create+0x34a/0x10d0 [ 3531.168335] ? kernel_text_address+0xf2/0x120 [ 3531.168348] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3531.168363] xas_store+0x8c/0x1c40 [ 3531.168386] __xa_store+0x164/0x2d0 [ 3531.168400] ? xa_delete_node+0x280/0x280 [ 3531.168419] ? trace_hardirqs_on+0x5b/0x180 [ 3531.168437] xa_store+0x31/0x50 [ 3531.168452] __io_uring_add_tctx_node+0x1cf/0x520 [ 3531.168466] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3531.168478] ? alloc_fd+0x2e7/0x670 [ 3531.168499] io_uring_setup+0x1fbb/0x2980 [ 3531.168518] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3531.168530] ? wait_for_completion_io+0x270/0x270 [ 3531.168558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3531.168572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3531.168587] do_syscall_64+0x33/0x40 [ 3531.168601] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3531.168610] RIP: 0033:0x7fe147fe7b19 [ 3531.168624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3531.168631] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3531.168646] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3531.168661] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3531.168669] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3531.168676] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3531.168684] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:06:10 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ed, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3531.227774] loop5: detected capacity change from 0 to 135266304 [ 3531.233705] loop3: detected capacity change from 0 to 135266304 11:06:10 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 57) 11:06:10 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {0x0}, {&(0x7f0000000540)=""/191, 0xbf}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:10 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ee, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3531.310079] 9pnet_virtio: no channels available for device 127.0.0.1 11:06:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x1261, &(0x7f00000000c0)) [ 3531.341344] FAULT_INJECTION: forcing a failure. [ 3531.341344] name failslab, interval 1, probability 0, space 0, times 0 [ 3531.342856] CPU: 1 PID: 17884 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3531.343738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3531.344843] Call Trace: [ 3531.345185] dump_stack+0x107/0x167 [ 3531.345663] should_fail.cold+0x5/0xa [ 3531.346160] ? xas_alloc+0x336/0x440 [ 3531.346642] should_failslab+0x5/0x20 [ 3531.347131] kmem_cache_alloc+0x5b/0x310 [ 3531.347655] xas_alloc+0x336/0x440 [ 3531.348114] xas_create+0x34a/0x10d0 [ 3531.348627] ? kernel_text_address+0xf2/0x120 [ 3531.349321] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3531.350012] xas_store+0x8c/0x1c40 [ 3531.350479] __xa_store+0x164/0x2d0 [ 3531.350948] ? xa_delete_node+0x280/0x280 [ 3531.351486] ? trace_hardirqs_on+0x5b/0x180 [ 3531.352044] xa_store+0x31/0x50 [ 3531.352485] __io_uring_add_tctx_node+0x1cf/0x520 [ 3531.353116] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3531.353832] ? alloc_fd+0x2e7/0x670 [ 3531.354313] io_uring_setup+0x1fbb/0x2980 [ 3531.354850] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3531.355526] ? wait_for_completion_io+0x270/0x270 [ 3531.356154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3531.356886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3531.357552] do_syscall_64+0x33/0x40 [ 3531.358029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3531.358684] RIP: 0033:0x7fe147fe7b19 [ 3531.359171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3531.361582] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3531.362561] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3531.363501] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3531.364452] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3531.365379] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3531.366319] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:06:10 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x0, 0xc3}) 11:06:10 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {0x0}, {&(0x7f0000000540)=""/191, 0xbf}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:10 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 58) 11:06:10 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x2, &(0x7f0000000100)) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) [ 3531.457248] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3531.462362] FAULT_INJECTION: forcing a failure. [ 3531.462362] name failslab, interval 1, probability 0, space 0, times 0 [ 3531.463862] CPU: 0 PID: 17901 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3531.464801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3531.465858] Call Trace: [ 3531.466202] dump_stack+0x107/0x167 [ 3531.466675] should_fail.cold+0x5/0xa [ 3531.467168] ? xas_alloc+0x336/0x440 [ 3531.467681] should_failslab+0x5/0x20 [ 3531.468167] kmem_cache_alloc+0x5b/0x310 [ 3531.468742] xas_alloc+0x336/0x440 [ 3531.469201] xas_create+0x34a/0x10d0 [ 3531.469687] ? kernel_text_address+0xf2/0x120 [ 3531.470267] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3531.470964] xas_store+0x8c/0x1c40 [ 3531.471429] __xa_store+0x164/0x2d0 [ 3531.471908] ? xa_delete_node+0x280/0x280 [ 3531.472446] ? trace_hardirqs_on+0x5b/0x180 [ 3531.473019] xa_store+0x31/0x50 [ 3531.473452] __io_uring_add_tctx_node+0x1cf/0x520 [ 3531.474070] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3531.474771] ? alloc_fd+0x2e7/0x670 [ 3531.475243] io_uring_setup+0x1fbb/0x2980 [ 3531.475825] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3531.476474] ? wait_for_completion_io+0x270/0x270 [ 3531.477124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3531.477797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3531.478487] do_syscall_64+0x33/0x40 [ 3531.478967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3531.479669] RIP: 0033:0x7fe147fe7b19 [ 3531.480150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3531.482541] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3531.483526] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3531.484464] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3531.485413] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3531.486342] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3531.487295] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:06:26 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ef, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:06:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:26 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x1262, &(0x7f00000000c0)) 11:06:26 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x64f02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5312, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) fcntl$getown(r1, 0x9) ioctl$CDROMREADTOCHDR(r1, 0x5305, &(0x7f00000000c0)) 11:06:26 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/158, 0x9e}, {0x0}, {&(0x7f0000000540)=""/191, 0xbf}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:26 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) 11:06:26 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 59) 11:06:26 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e6572", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3547.433999] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3547.441324] FAULT_INJECTION: forcing a failure. [ 3547.441324] name failslab, interval 1, probability 0, space 0, times 0 [ 3547.442824] CPU: 0 PID: 17920 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3547.443728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3547.444812] Call Trace: [ 3547.445186] dump_stack+0x107/0x167 [ 3547.445675] should_fail.cold+0x5/0xa [ 3547.446179] ? xas_alloc+0x336/0x440 [ 3547.446682] should_failslab+0x5/0x20 [ 3547.447190] kmem_cache_alloc+0x5b/0x310 [ 3547.447732] xas_alloc+0x336/0x440 [ 3547.448210] xas_create+0x34a/0x10d0 [ 3547.448716] ? kernel_text_address+0xf2/0x120 [ 3547.449328] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3547.450027] xas_store+0x8c/0x1c40 [ 3547.450517] __xa_store+0x164/0x2d0 [ 3547.451004] ? xa_delete_node+0x280/0x280 [ 3547.451561] ? trace_hardirqs_on+0x5b/0x180 [ 3547.452150] xa_store+0x31/0x50 [ 3547.452594] __io_uring_add_tctx_node+0x1cf/0x520 [ 3547.453250] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3547.453943] ? alloc_fd+0x2e7/0x670 [ 3547.454421] io_uring_setup+0x1fbb/0x2980 [ 3547.454989] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3547.455660] ? wait_for_completion_io+0x270/0x270 [ 3547.456323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3547.457032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3547.457716] do_syscall_64+0x33/0x40 [ 3547.458209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3547.458883] RIP: 0033:0x7fe147fe7b19 [ 3547.459370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3547.461768] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3547.462753] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3547.463680] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3547.464604] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3547.465555] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3547.466479] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:06:26 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3547.475363] loop5: detected capacity change from 0 to 135266304 [ 3547.501356] loop3: detected capacity change from 0 to 135266304 11:06:26 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 60) 11:06:26 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e6572", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:26 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x1263, &(0x7f00000000c0)) 11:06:26 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3547.617322] 9pnet_virtio: no channels available for device 127.0.0.1 11:06:26 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) [ 3547.626054] FAULT_INJECTION: forcing a failure. [ 3547.626054] name failslab, interval 1, probability 0, space 0, times 0 [ 3547.628311] CPU: 1 PID: 17946 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3547.633737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3547.634809] Call Trace: [ 3547.635171] dump_stack+0x107/0x167 [ 3547.635378] loop3: detected capacity change from 0 to 135266304 [ 3547.635638] should_fail.cold+0x5/0xa [ 3547.635656] ? create_object.isra.0+0x3a/0xa20 [ 3547.635677] should_failslab+0x5/0x20 [ 3547.637979] kmem_cache_alloc+0x5b/0x310 [ 3547.638520] ? mark_held_locks+0x9e/0xe0 [ 3547.639056] create_object.isra.0+0x3a/0xa20 [ 3547.639629] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3547.640307] kmem_cache_alloc+0x159/0x310 [ 3547.640869] xas_alloc+0x336/0x440 [ 3547.641348] xas_create+0x34a/0x10d0 [ 3547.641849] ? kernel_text_address+0xf2/0x120 [ 3547.642449] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3547.643148] xas_store+0x8c/0x1c40 [ 3547.643631] __xa_store+0x164/0x2d0 [ 3547.644117] ? xa_delete_node+0x280/0x280 [ 3547.644666] ? trace_hardirqs_on+0x5b/0x180 [ 3547.645259] xa_store+0x31/0x50 [ 3547.645709] __io_uring_add_tctx_node+0x1cf/0x520 [ 3547.646346] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3547.647038] ? alloc_fd+0x2e7/0x670 [ 3547.647535] io_uring_setup+0x1fbb/0x2980 [ 3547.648106] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3547.648769] ? wait_for_completion_io+0x270/0x270 [ 3547.649436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3547.650116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3547.650791] do_syscall_64+0x33/0x40 [ 3547.651281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3547.651958] RIP: 0033:0x7fe147fe7b19 [ 3547.652446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3547.654827] RSP: 002b:00007fe14555d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3547.655815] RAX: ffffffffffffffda RBX: 00007fe1480faf60 RCX: 00007fe147fe7b19 [ 3547.656746] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 0000000000007092 [ 3547.657708] RBP: 0000000020000100 R08: 00000000200001c0 R09: 00000000200001c0 [ 3547.658634] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200001c0 [ 3547.659565] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:06:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:26 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3547.722298] loop5: detected capacity change from 0 to 135266304 11:06:26 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 61) 11:06:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x1264, &(0x7f00000000c0)) 11:06:27 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f1, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:06:27 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r2, 0x5312, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/fscreate\x00', 0x2, 0x0) dup3(r2, r3, 0x80000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x2f}) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x9, 0x3}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r4, r1, 0x0) 11:06:27 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:27 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3547.872066] loop5: detected capacity change from 0 to 135266304 [ 3547.902873] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3547.915476] FAULT_INJECTION: forcing a failure. [ 3547.915476] name failslab, interval 1, probability 0, space 0, times 0 [ 3547.917189] CPU: 1 PID: 17975 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3547.918096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3547.919181] Call Trace: [ 3547.919542] dump_stack+0x107/0x167 [ 3547.920027] should_fail.cold+0x5/0xa [ 3547.920544] ? vm_area_dup+0x78/0x290 [ 3547.921074] should_failslab+0x5/0x20 [ 3547.921580] kmem_cache_alloc+0x5b/0x310 [ 3547.922123] vm_area_dup+0x78/0x290 [ 3547.922606] ? lock_release+0x680/0x680 [ 3547.923115] ? mark_lock+0xf5/0x2df0 [ 3547.923603] ? lock_chain_count+0x20/0x20 [ 3547.924140] ? mark_lock+0xf5/0x2df0 [ 3547.924638] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3547.925352] ? lock_chain_count+0x20/0x20 [ 3547.925904] ? mark_lock+0xf5/0x2df0 [ 3547.926400] ? vm_area_alloc+0x110/0x110 [ 3547.926942] ? __lock_acquire+0x1657/0x5b00 [ 3547.927531] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3547.928194] ? vmacache_find+0x55/0x2a0 [ 3547.928707] __split_vma+0xa8/0x4e0 [ 3547.929204] __do_munmap+0x365/0x1260 [ 3547.929720] ? arch_get_unmapped_area+0x450/0x450 [ 3547.930356] ? lock_release+0x680/0x680 [ 3547.930886] mmap_region+0x7c8/0x1500 [ 3547.931403] do_mmap+0xcdb/0x11e0 [ 3547.931872] vm_mmap_pgoff+0x198/0x1f0 [ 3547.932391] ? randomize_page+0xb0/0xb0 [ 3547.932945] ksys_mmap_pgoff+0x41c/0x560 [ 3547.933488] ? find_mergeable_anon_vma+0x250/0x250 [ 3547.934137] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3547.934824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3547.935508] do_syscall_64+0x33/0x40 [ 3547.936002] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3547.936680] RIP: 0033:0x7fe147fe7b62 [ 3547.937201] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3547.939594] RSP: 002b:00007fe14555d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3547.940583] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe147fe7b62 [ 3547.941536] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3547.942452] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3547.943379] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 3547.944282] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:06:43 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:43 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x3890311ca6388ecf, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x2, 'bond_slave_0\x00', {0x8}, 0x8}) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0x0, 0x3}) 11:06:43 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 62) 11:06:43 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ea, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:06:43 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x1265, &(0x7f00000000c0)) 11:06:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:43 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {0x0}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:43 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3563.906853] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3563.913979] FAULT_INJECTION: forcing a failure. [ 3563.913979] name failslab, interval 1, probability 0, space 0, times 0 [ 3563.915572] CPU: 0 PID: 17997 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3563.916477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3563.917588] Call Trace: [ 3563.917948] dump_stack+0x107/0x167 [ 3563.918429] should_fail.cold+0x5/0xa [ 3563.918935] ? create_object.isra.0+0x3a/0xa20 [ 3563.919556] should_failslab+0x5/0x20 [ 3563.920071] kmem_cache_alloc+0x5b/0x310 [ 3563.920620] create_object.isra.0+0x3a/0xa20 [ 3563.925226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3563.925906] kmem_cache_alloc+0x159/0x310 [ 3563.926462] vm_area_dup+0x78/0x290 [ 3563.926947] ? lock_release+0x680/0x680 [ 3563.927476] ? mark_lock+0xf5/0x2df0 [ 3563.927975] ? lock_chain_count+0x20/0x20 [ 3563.928520] ? mark_lock+0xf5/0x2df0 [ 3563.929034] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3563.929738] ? lock_chain_count+0x20/0x20 [ 3563.930286] ? mark_lock+0xf5/0x2df0 [ 3563.930778] ? vm_area_alloc+0x110/0x110 [ 3563.931314] ? __lock_acquire+0x1657/0x5b00 [ 3563.931896] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3563.932571] ? vmacache_find+0x55/0x2a0 [ 3563.933167] __split_vma+0xa8/0x4e0 [ 3563.933656] __do_munmap+0x365/0x1260 [ 3563.934161] ? arch_get_unmapped_area+0x450/0x450 [ 3563.934799] ? lock_release+0x680/0x680 [ 3563.935326] mmap_region+0x7c8/0x1500 [ 3563.935844] do_mmap+0xcdb/0x11e0 [ 3563.936309] vm_mmap_pgoff+0x198/0x1f0 [ 3563.936834] ? randomize_page+0xb0/0xb0 [ 3563.937381] ksys_mmap_pgoff+0x41c/0x560 [ 3563.937924] ? find_mergeable_anon_vma+0x250/0x250 [ 3563.938579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3563.939277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3563.939963] do_syscall_64+0x33/0x40 [ 3563.940457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3563.941170] RIP: 0033:0x7fe147fe7b62 [ 3563.941667] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3563.944038] RSP: 002b:00007fe14555d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3563.949057] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe147fe7b62 [ 3563.949995] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3563.950920] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3563.951847] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 3563.952780] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:06:43 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xe080, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="46bf9c21d1c57698f2e72232a9eecd8a7a94d27c46eb22e9e8721ba25fc9ccfd2eb4493c4516c1cdf954d160ee36f8fcf6a78e019578a1ec520060c3f0f77902503a1060720de084fa70618394fad625e879b1c7219fb5a3842aba74c81c49ea9b32c872d8b26104c1eefdf11a95016ffd5f4b36c8b496da2c8971cfb4c4b929ebf2398fb79f23b163e74a7cbeda4fd06db3d07392c841f18d6e61b375e795990e7cfd80d5edba6fd5f0e4ba2446ca3bd7bf0d7e4434", 0xb6}, {&(0x7f0000000400)="bf291633fb520b3f3f474309df2d40731eee1c1f0680c87d84191f3bb06c86edbacd397bb6707dbb33c9ad7c379cda3f0fdea50e51f2146cf2807bd233af35e8fa2e57283fbd2a760b4c0b3869e3a7b10558f18476ca3727131658c84e958d276dec0682360b559d6071e4dc588b8f737cb9d400e3c02aa0cc95f9b1e5c72e3cbb1919700b371409b6eea0f1f2bf911f2d4bb8f089fc40e57cd577e5e2d3934917bbb6c34534998a65ae0598e65e4b6b6315689d50ab377de5e3100bc183523bf57d253c82527b7c47475831e7bcf3e03ae900c531e44d1f365ef026f8fa6615b04703373061b488a72cd1a14f0982ea", 0xf0}], 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xfcb02, 0x0) ioctl$CDROMREADTOCHDR(r1, 0x5305, &(0x7f00000000c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r2, 0x5312, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 3563.991319] loop3: detected capacity change from 0 to 135266304 11:06:43 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {0x0}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3564.013978] loop5: detected capacity change from 0 to 135266304 11:06:43 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:06:43 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3564.129315] loop6: detected capacity change from 0 to 135266304 [ 3580.279088] 9pnet_virtio: no channels available for device 127.0.0.1 11:06:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x1267, &(0x7f00000000c0)) 11:06:59 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:59 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:59 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/245, 0xf5}, {0x0}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:59 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:59 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:06:59 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000000)={0x0, 0x80, 0xf, 0x8, 0x2, 0x7b, @lba=0x1, @lba=0x1f}) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000000040)={0x47, 0x20}) 11:06:59 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 63) [ 3580.285839] FAULT_INJECTION: forcing a failure. [ 3580.285839] name failslab, interval 1, probability 0, space 0, times 0 [ 3580.287356] CPU: 1 PID: 18042 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3580.288252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3580.289339] Call Trace: [ 3580.289699] dump_stack+0x107/0x167 [ 3580.290180] should_fail.cold+0x5/0xa [ 3580.290739] ? anon_vma_clone+0xdc/0x590 [ 3580.290775] loop6: detected capacity change from 0 to 135266304 [ 3580.290853] should_failslab+0x5/0x20 [ 3580.290868] kmem_cache_alloc+0x5b/0x310 [ 3580.290888] anon_vma_clone+0xdc/0x590 [ 3580.290912] __split_vma+0x17c/0x4e0 [ 3580.290928] __do_munmap+0x365/0x1260 [ 3580.290947] ? arch_get_unmapped_area+0x450/0x450 [ 3580.290964] ? lock_release+0x680/0x680 [ 3580.290981] mmap_region+0x7c8/0x1500 [ 3580.291008] do_mmap+0xcdb/0x11e0 [ 3580.291030] vm_mmap_pgoff+0x198/0x1f0 [ 3580.291049] ? randomize_page+0xb0/0xb0 [ 3580.291076] ksys_mmap_pgoff+0x41c/0x560 [ 3580.291092] ? find_mergeable_anon_vma+0x250/0x250 [ 3580.291110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3580.291127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3580.291144] do_syscall_64+0x33/0x40 [ 3580.291159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3580.291170] RIP: 0033:0x7fe147fe7b62 11:06:59 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3580.291185] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3580.291193] RSP: 002b:00007fe14555d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3580.291209] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe147fe7b62 11:06:59 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) (fail_nth: 1) [ 3580.291219] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3580.291228] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 11:06:59 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 64) [ 3580.291237] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 3580.291246] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3580.302102] loop3: detected capacity change from 0 to 135266304 [ 3580.367708] loop5: detected capacity change from 0 to 135266304 11:06:59 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:06:59 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3580.490283] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3580.498844] FAULT_INJECTION: forcing a failure. [ 3580.498844] name failslab, interval 1, probability 0, space 0, times 0 [ 3580.500343] CPU: 0 PID: 18062 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3580.501231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3580.502300] Call Trace: [ 3580.502645] dump_stack+0x107/0x167 [ 3580.503114] should_fail.cold+0x5/0xa [ 3580.503602] ? ___slab_alloc+0x155/0x700 [ 3580.504122] ? create_object.isra.0+0x3a/0xa20 [ 3580.504709] should_failslab+0x5/0x20 [ 3580.505196] kmem_cache_alloc+0x5b/0x310 [ 3580.505738] create_object.isra.0+0x3a/0xa20 [ 3580.506300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3580.506952] kmem_cache_alloc+0x159/0x310 [ 3580.507488] anon_vma_clone+0xdc/0x590 [ 3580.507992] __split_vma+0x17c/0x4e0 [ 3580.508471] __do_munmap+0x365/0x1260 [ 3580.508962] ? arch_get_unmapped_area+0x450/0x450 [ 3580.509609] ? lock_release+0x680/0x680 [ 3580.510137] mmap_region+0x7c8/0x1500 [ 3580.510656] do_mmap+0xcdb/0x11e0 [ 3580.511124] vm_mmap_pgoff+0x198/0x1f0 [ 3580.511643] ? randomize_page+0xb0/0xb0 [ 3580.512182] ksys_mmap_pgoff+0x41c/0x560 [ 3580.512719] ? find_mergeable_anon_vma+0x250/0x250 [ 3580.513388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3580.514100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3580.514771] do_syscall_64+0x33/0x40 [ 3580.515256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3580.515923] RIP: 0033:0x7fe147fe7b62 [ 3580.516411] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3580.522816] RSP: 002b:00007fe14555d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3580.523804] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe147fe7b62 [ 3580.524735] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3580.525685] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3580.525694] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 3580.525703] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3580.527639] FAULT_INJECTION: forcing a failure. [ 3580.527639] name fail_usercopy, interval 1, probability 0, space 0, times 0 11:06:59 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3580.527654] CPU: 1 PID: 18071 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 3580.527663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3580.527667] Call Trace: [ 3580.527682] dump_stack+0x107/0x167 [ 3580.527699] should_fail.cold+0x5/0xa [ 3580.527720] _copy_to_user+0x2e/0x180 [ 3580.527742] simple_read_from_buffer+0xcc/0x160 [ 3580.527763] proc_fail_nth_read+0x198/0x230 [ 3580.527782] ? proc_sessionid_read+0x230/0x230 [ 3580.527802] ? security_file_permission+0xb1/0xe0 [ 3580.527824] ? proc_sessionid_read+0x230/0x230 [ 3580.527838] vfs_read+0x228/0x620 [ 3580.527859] ksys_read+0x12d/0x260 [ 3580.527874] ? vfs_write+0xb10/0xb10 [ 3580.527893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 11:06:59 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0xb) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, @in_args={0x5}}, './file0\x00'}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r2, 0x5312, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="4124134d"], 0x4) 11:06:59 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 65) 11:06:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x1268, &(0x7f00000000c0)) 11:06:59 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) [ 3580.527907] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3580.527924] do_syscall_64+0x33/0x40 [ 3580.527938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3580.527948] RIP: 0033:0x7efde6f8f69c [ 3580.527962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3580.527970] RSP: 002b:00007efde4531170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3580.527986] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007efde6f8f69c [ 3580.527995] RDX: 000000000000000f RSI: 00007efde45311e0 RDI: 0000000000000004 [ 3580.528004] RBP: 00007efde45311d0 R08: 0000000000000000 R09: 0000000000000000 [ 3580.528013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:06:59 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:06:59 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3580.528021] R13: 00007ffdce43aa9f R14: 00007efde4531300 R15: 0000000000022000 11:06:59 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 66) [ 3580.621755] loop3: detected capacity change from 0 to 135266304 11:06:59 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3580.633076] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3580.643080] FAULT_INJECTION: forcing a failure. [ 3580.643080] name failslab, interval 1, probability 0, space 0, times 0 [ 3580.643098] CPU: 1 PID: 18080 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3580.643109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3580.643123] Call Trace: [ 3580.643149] dump_stack+0x107/0x167 [ 3580.643171] should_fail.cold+0x5/0xa [ 3580.643193] ? vm_area_alloc+0x1c/0x110 [ 3580.643215] should_failslab+0x5/0x20 11:07:00 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x2, &(0x7f00000000c0)) [ 3580.643235] kmem_cache_alloc+0x5b/0x310 [ 3580.643259] vm_area_alloc+0x1c/0x110 [ 3580.643276] mmap_region+0x97e/0x1500 [ 3580.643310] do_mmap+0xcdb/0x11e0 [ 3580.643334] vm_mmap_pgoff+0x198/0x1f0 [ 3580.643354] ? randomize_page+0xb0/0xb0 [ 3580.643379] ksys_mmap_pgoff+0x41c/0x560 [ 3580.643395] ? find_mergeable_anon_vma+0x250/0x250 [ 3580.643416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3580.643433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3580.643451] do_syscall_64+0x33/0x40 [ 3580.643466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3580.643476] RIP: 0033:0x7fe147fe7b62 [ 3580.643491] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3580.643500] RSP: 002b:00007fe14555d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3580.643516] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe147fe7b62 [ 3580.643525] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3580.643534] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3580.643543] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 3580.643553] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3580.734251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3580.734278] print_req_error: 790 callbacks suppressed [ 3580.734293] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3580.740274] loop5: detected capacity change from 0 to 135266304 [ 3580.759049] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3580.765725] FAULT_INJECTION: forcing a failure. [ 3580.765725] name failslab, interval 1, probability 0, space 0, times 0 [ 3580.789569] CPU: 0 PID: 18101 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3580.789578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3580.789583] Call Trace: [ 3580.789605] dump_stack+0x107/0x167 [ 3580.789622] should_fail.cold+0x5/0xa [ 3580.789638] ? create_object.isra.0+0x3a/0xa20 [ 3580.789657] should_failslab+0x5/0x20 [ 3580.789672] kmem_cache_alloc+0x5b/0x310 [ 3580.789691] create_object.isra.0+0x3a/0xa20 [ 3580.789703] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3580.789721] kmem_cache_alloc+0x159/0x310 [ 3580.789742] vm_area_alloc+0x1c/0x110 [ 3580.789755] mmap_region+0x97e/0x1500 11:07:00 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 3580.789781] do_mmap+0xcdb/0x11e0 [ 3580.789803] vm_mmap_pgoff+0x198/0x1f0 [ 3580.789822] ? randomize_page+0xb0/0xb0 [ 3580.789850] ksys_mmap_pgoff+0x41c/0x560 [ 3580.789867] ? find_mergeable_anon_vma+0x250/0x250 [ 3580.789887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3580.789904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3580.789922] do_syscall_64+0x33/0x40 [ 3580.789937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3580.789948] RIP: 0033:0x7fe147fe7b62 [ 3580.789964] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3580.789973] RSP: 002b:00007fe14555d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3580.789989] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe147fe7b62 [ 3580.789998] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3580.790007] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3580.790016] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 3580.790025] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 11:07:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:07:16 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:07:16 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 67) 11:07:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000000c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8000, 0x0, 0x3, 0xffff0000}, {0x0, 0x7, 0x100, 0x4}}}, 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) io_setup(0x13e6d54a, &(0x7f0000000180)) fsmount(r1, 0x1, 0x8e) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000500)="f1687c27303a1a68ccfc13513128909f148261517ffcb81394430b12605629b3fc915f083fe11cf4d5dd6f415177ff9bb4c767df1eb532bba956ee3a38a95bd0fe405185c1a83f7beae5cdce366191ec24806f0cb21d639086ee92564cb722f88498c35a1bcdb51e2af43d951af408d8e5", 0x71, 0xfffffffffffff1f1}, {&(0x7f0000000440)="edbb6c", 0x3, 0x6}, {&(0x7f0000000580)="a0969fd36d65218df3a46aea34a23cdf000ad0da3e75b7b25fcf33538363f507cd232ba01bdda0b44317501a361d6149b075542edfa993c95ba361762f709ecc1e167d847b62a0f38308f586e1d230357f38883619b81b00760d842f3196d1850be719e08d353028beebec305789ec8d042e67c28806799a52805a660742bfb5588a42286e7d4fc4347864fe4ea95ca555d3ab1e6d0d23a5ac858b379f2e59915deaaaed3da587afb34efa72ad56a40ba449a70407109c77268f3305da2e2cbda4ea527734f9b47a4f79606e9c8e3f7670d7f54ea7f3e989022d219f539f1050a18e28874ae67de5918bbe3e3d78369a939078", 0xf3, 0x800}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c03537bda9729b91213cbb696724980d231f0916c2cae8269", 0x83, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB='/dev/vcs#\x00,/dev/vcs#\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d43524544535f434845434b2c736d61636b6673666c6f6f723d002c736d61636b66736861743d2c7063723d30303030303030303030303030303030303031322c736d61636b66737472616e736d7574653d2a2f212c40ac272b5e262d2c5c79b02c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c056f756f626a5f726f6c653d002c7569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, 0x0, 0x0) syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b6, 0x8, 0x1, 0x67, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:07:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0f9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 11:07:16 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x1269, &(0x7f00000000c0)) 11:07:16 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) fdatasync(r0) ioctl$DVD_READ_STRUCT(r1, 0x5312, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r2, 0x5312, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0}) 11:07:16 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x40) ioctl$CDROMREADTOCHDR(r0, 0x301, &(0x7f00000000c0)) [ 3596.789953] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3596.791636] loop3: detected capacity change from 0 to 135266304 [ 3596.796898] FAULT_INJECTION: forcing a failure. [ 3596.796898] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3596.802088] CPU: 0 PID: 18134 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3596.802971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3596.804025] Call Trace: [ 3596.804365] dump_stack+0x107/0x167 [ 3596.804841] should_fail.cold+0x5/0xa [ 3596.805334] __alloc_pages_nodemask+0x182/0x600 [ 3596.805951] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3596.806723] ? walk_mem_res+0x170/0x170 [ 3596.807239] alloc_pages_current+0x187/0x280 [ 3596.807807] pte_alloc_one+0x16/0x1a0 [ 3596.808293] __pte_alloc+0x1d/0x330 [ 3596.808769] remap_pfn_range_internal+0x9a3/0xf60 [ 3596.809398] ? lookup_memtype+0x5b/0x200 [ 3596.809937] ? apply_to_existing_page_range+0x40/0x40 [ 3596.810609] remap_pfn_range+0xcd/0x160 [ 3596.811123] ? remap_pfn_range_notrack+0x70/0x70 [ 3596.811740] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3596.811759] io_uring_mmap+0x398/0x530 [ 3596.811776] mmap_file+0x5e/0xe0 [ 3596.811789] mmap_region+0xc49/0x1500 [ 3596.811812] do_mmap+0xcdb/0x11e0 [ 3596.811830] vm_mmap_pgoff+0x198/0x1f0 [ 3596.811847] ? randomize_page+0xb0/0xb0 [ 3596.811871] ksys_mmap_pgoff+0x41c/0x560 [ 3596.811886] ? find_mergeable_anon_vma+0x250/0x250 [ 3596.811904] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3596.811919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3596.811935] do_syscall_64+0x33/0x40 [ 3596.811948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3596.811958] RIP: 0033:0x7fe147fe7b62 [ 3596.811971] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3596.811979] RSP: 002b:00007fe14555d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3596.811994] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe147fe7b62 [ 3596.812002] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3596.812010] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3596.812018] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 3596.812026] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3596.820438] ------------[ cut here ]------------ [ 3596.841071] WARNING: CPU: 0 PID: 18134 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 3596.842244] Modules linked in: [ 3596.842685] CPU: 0 PID: 18134 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 3596.843585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3596.844695] RIP: 0010:get_pat_info+0x216/0x270 [ 3596.845284] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 51 89 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 3a 89 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 65 8f 5a 00 e9 [ 3596.847683] RSP: 0018:ffff88804a947898 EFLAGS: 00010206 [ 3596.848384] RAX: 000000000000e5b0 RBX: ffff88804c437000 RCX: ffffc900007e3000 [ 3596.849320] RDX: 0000000000040000 RSI: ffffffff81124696 RDI: 0000000000000007 [ 3596.851020] RBP: ffff88804a947950 R08: 0000000000000000 R09: ffff88804a947820 [ 3596.853246] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 3596.870280] R13: 1ffff11009528f13 R14: 0000000000000000 R15: ffff88804c437050 [ 3596.871233] FS: 00007fe14555d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 3596.872298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3596.873072] CR2: 00007fcc7cd12200 CR3: 0000000046fce000 CR4: 0000000000350ef0 [ 3596.878080] Call Trace: [ 3596.878453] ? pgprot_writethrough+0xc0/0xc0 [ 3596.879024] ? finish_task_switch+0x126/0x5d0 [ 3596.879619] ? finish_task_switch+0xef/0x5d0 [ 3596.880193] untrack_pfn+0xdc/0x240 [ 3596.880680] ? track_pfn_insert+0x150/0x150 [ 3596.881247] ? lock_downgrade+0x6d0/0x6d0 [ 3596.885842] ? uprobe_munmap+0x95/0x560 [ 3596.886364] unmap_single_vma+0x1bc/0x300 [ 3596.886930] zap_page_range_single+0x2ce/0x450 [ 3596.887548] ? unmap_single_vma+0x300/0x300 [ 3596.888107] ? remap_pfn_range_internal+0xc56/0xf60 [ 3596.888771] ? lookup_memtype+0x5b/0x200 [ 3596.889302] ? apply_to_existing_page_range+0x40/0x40 [ 3596.889999] remap_pfn_range+0x139/0x160 [ 3596.890551] ? remap_pfn_range_notrack+0x70/0x70 [ 3596.891162] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3596.891856] io_uring_mmap+0x398/0x530 [ 3596.892356] mmap_file+0x5e/0xe0 [ 3596.892813] mmap_region+0xc49/0x1500 [ 3596.893322] do_mmap+0xcdb/0x11e0 [ 3596.893812] vm_mmap_pgoff+0x198/0x1f0 [ 3596.894317] ? randomize_page+0xb0/0xb0 [ 3596.894863] ksys_mmap_pgoff+0x41c/0x560 [ 3596.895391] ? find_mergeable_anon_vma+0x250/0x250 [ 3596.896047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3596.896746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3596.897438] do_syscall_64+0x33/0x40 [ 3596.897928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3596.898609] RIP: 0033:0x7fe147fe7b62 [ 3596.899090] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3596.901474] RSP: 002b:00007fe14555d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3596.902486] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe147fe7b62 [ 3596.903418] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3596.904333] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3596.905261] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 11:07:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0fa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3596.906208] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 [ 3596.918003] irq event stamp: 1997 [ 3596.918480] hardirqs last enabled at (2007): [] console_unlock+0x92d/0xb40 [ 3596.919588] hardirqs last disabled at (2016): [] console_unlock+0x839/0xb40 [ 3596.920707] softirqs last enabled at (1408): [] asm_call_irq_on_stack+0x12/0x20 [ 3596.921910] softirqs last disabled at (1329): [] asm_call_irq_on_stack+0x12/0x20 [ 3596.923067] ---[ end trace ecd08be70c7aa0c3 ]--- [ 3596.944874] loop5: detected capacity change from 0 to 135266304 11:07:16 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/191, 0xbf}], 0x4}}], 0x1, 0x40, &(0x7f0000004980)={0x77359400}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d40)='/sys/module/i915', 0x40000, 0x100) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 11:07:16 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008070ecc70a509d044effff0000512355f623bfb14480cfb90270e1510a5e86372a001d00000000ffff000051bac17f"]) syz_io_uring_setup(0x7092, &(0x7f0000000100)={0x0, 0xe100, 0x1, 0x1, 0x301}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (fail_nth: 68) 11:07:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ca3, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="4433048fd9880d6c29", 0x9}, {&(0x7f0000000100)="35bd6ead0cfa50e21ce24d057fb62c4c92934f1b0798df69f0171b4f5ab696eb581b8ef8ff1cd180b31607", 0x2b}, {&(0x7f0000000180)="cfe688", 0x3}, {&(0x7f0000000500)="6d70503d874c12948864633fc49a153a8f5443b0945e1b08886d821210413a0ee04847015cb8dc5b6626813dc5a235f50a513aebf59b1d496c910dae914fb0753c9e3b8321378477a69149c27807b4fb5c5d76f2bc0d7e970a82de85797dd6e1d4293ea017aa1d4a6a58ebdb33578878464bd5e1299404749d217c189e14a1ff76dc25d84bbfcadc69ebebdf92697e66e1c70f722a2aff6dc8d28160927d3975324e4395455f7c829f13572510a9d7680a868b4275da0d56f18df34c9c9dfe4833cbebb448bc", 0xc6}], 0x4, &(0x7f0000000600)=[{0xa0, 0x118, 0x3f, "48434f5e2858f77cd43bf8757233e0c432677af30f785d991e6286667fb4e3122616a9a8ddcfa2718326e1747b62902541329a969abf86a96160d1e4e4ed6c16c1f2aace1df337d7e76c12f4a3971ac6a4f329ed0e1a0fae88641deb6e4dca6cde9d25423d56593d0c7dc2f2d0e4973468ef3e82954f778370e7aa898914d04b3e1cc94e1ed39c5cb603e7"}, {0x58, 0x10f, 0x7, "ef058bcc3b922750ba9ab56900b01a3089635cf32208a5d9b2b8cb604b2d4e24f4fd53e75fa33ebe4366d914593e17743f473fa3c2c439451b8c3cec754d483179a21636"}], 0xf8}, 0x0, 0x0, 0x1}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0fb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 3597.044962] 9pnet_virtio: no channels available for device 127.0.0.1 [ 3597.049138] FAULT_INJECTION: forcing a failure. [ 3597.049138] name failslab, interval 1, probability 0, space 0, times 0 [ 3597.050822] CPU: 1 PID: 18156 Comm: syz-executor.0 Tainted: G W 5.10.238 #1 [ 3597.051949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3597.053056] Call Trace: [ 3597.053406] dump_stack+0x107/0x167 [ 3597.053931] should_fail.cold+0x5/0xa [ 3597.054420] ? ptlock_alloc+0x1d/0x70 [ 3597.054965] should_failslab+0x5/0x20 [ 3597.055453] kmem_cache_alloc+0x5b/0x310 [ 3597.056031] ptlock_alloc+0x1d/0x70 [ 3597.056501] pte_alloc_one+0x68/0x1a0 [ 3597.057062] __pte_alloc+0x1d/0x330 [ 3597.057562] remap_pfn_range_internal+0x9a3/0xf60 [ 3597.058299] ? lookup_memtype+0x5b/0x200 [ 3597.059257] ? apply_to_existing_page_range+0x40/0x40 [ 3597.059978] remap_pfn_range+0xcd/0x160 [ 3597.060487] ? remap_pfn_range_notrack+0x70/0x70 [ 3597.061146] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3597.061875] io_uring_mmap+0x398/0x530 [ 3597.062381] mmap_file+0x5e/0xe0 [ 3597.062894] mmap_region+0xc49/0x1500 [ 3597.063389] do_mmap+0xcdb/0x11e0 [ 3597.063890] vm_mmap_pgoff+0x198/0x1f0 [ 3597.064389] ? randomize_page+0xb0/0xb0 [ 3597.064959] ksys_mmap_pgoff+0x41c/0x560 [ 3597.065494] ? find_mergeable_anon_vma+0x250/0x250 [ 3597.066179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3597.066931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3597.067591] do_syscall_64+0x33/0x40 [ 3597.068118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3597.068820] RIP: 0033:0x7fe147fe7b62 [ 3597.069298] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3597.071729] RSP: 002b:00007fe14555d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3597.072815] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe147fe7b62 [ 3597.073733] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3597.074678] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3597.075634] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 3597.076615] R13: 0000000020ffc000 R14: 0000000020000180 R15: 0000000020ffc000 VM DIAGNOSIS: 11:07:16 Registers: info registers vcpu 0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e1721 RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff88804a9472a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000037 R13=0000000000000037 R14=ffffffff879f5100 R15=dffffc0000000000 RIP=ffffffff822e1778 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe14555d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcc7cd12200 CR3=0000000046fce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=494e4f544f4e4f4d5f454352554f535f XMM01=454d49545f43494e4f544f4e4f4d5f45 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=6b4385aa627b62ef0000000000c618b8 XMM05=d3fdd5f48436fbd700000000000aec08 XMM06=04a1174a6eeb449b00000000000aeac0 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff81302c70 RCX=1ffff11009648d01 RDX=1ffff11009648db4 RSI=ffffffff811c3b0f RDI=ffff88804b246e10 RBP=ffff88804b246de0 RSP=ffff88804b246d50 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff11009648d98 R12=ffff88804b246e10 R13=0000000000000000 R14=ffff88805c6f3480 R15=0000000000000170 RIP=ffffffff81302c7a RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcc779f9b80 CR3=0000000046334000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000