1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:05:12 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 18) [ 2381.069021] FAULT_INJECTION: forcing a failure. [ 2381.069021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2381.071786] CPU: 0 PID: 12440 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2381.073338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2381.075328] Call Trace: [ 2381.075933] dump_stack+0x107/0x167 [ 2381.076757] should_fail.cold+0x5/0xa [ 2381.077614] __alloc_pages_nodemask+0x182/0x600 [ 2381.078673] ? lock_downgrade+0x6d0/0x6d0 [ 2381.079604] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2381.080958] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2381.082129] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2381.083214] copy_process+0x62b/0x78b0 [ 2381.084107] ? stack_trace_save+0x8c/0xc0 [ 2381.085036] ? lock_acquire+0x197/0x470 [ 2381.085948] ? io_sq_thread_park+0x79/0xd0 [ 2381.086928] ? lock_release+0x680/0x680 [ 2381.087845] ? __cleanup_sighand+0xb0/0xb0 [ 2381.088814] ? kernel_text_address+0xf2/0x120 [ 2381.089833] ? find_held_lock+0x2c/0x110 [ 2381.090772] ? io_uring_setup+0x1c23/0x2980 [ 2381.091762] ? lock_downgrade+0x6d0/0x6d0 [ 2381.092708] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2381.093836] create_io_thread+0xb6/0xf0 [ 2381.094747] ? pidfd_prepare+0x80/0x80 [ 2381.095641] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2381.096776] io_uring_setup+0x1d79/0x2980 [ 2381.097721] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2381.098862] ? wait_for_completion_io+0x270/0x270 [ 2381.099973] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2381.101144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2381.102323] do_syscall_64+0x33/0x40 [ 2381.103183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2381.104360] RIP: 0033:0x7f838ee79b19 [ 2381.105209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2381.109397] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2381.111110] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2381.112711] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2381.114314] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2381.115920] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2381.117522] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:05:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x3) 05:05:26 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:05:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x30000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2395.256699] FAULT_INJECTION: forcing a failure. [ 2395.256699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2395.258143] CPU: 0 PID: 12459 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2395.259000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.260000] Call Trace: [ 2395.260331] dump_stack+0x107/0x167 [ 2395.260777] should_fail.cold+0x5/0xa [ 2395.261241] strncpy_from_user+0x34/0x470 [ 2395.261752] getname_flags.part.0+0x95/0x4f0 [ 2395.262289] getname+0x8e/0xd0 [ 2395.262693] do_sys_openat2+0xf9/0x4d0 [ 2395.263170] ? build_open_flags+0x6f0/0x6f0 [ 2395.263698] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2395.264291] ? wait_for_completion_io+0x270/0x270 [ 2395.264880] __x64_sys_openat+0x13f/0x1f0 [ 2395.265399] ? __ia32_sys_open+0x1c0/0x1c0 [ 2395.265914] ? ksys_write+0x1a9/0x260 [ 2395.266379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.267029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.267667] do_syscall_64+0x33/0x40 [ 2395.268116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2395.268742] RIP: 0033:0x7f10a0111a04 [ 2395.269200] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2395.271458] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2395.272396] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2395.273274] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2395.274162] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2395.275033] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2395.275915] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:05:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x900, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:05:26 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00"]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:05:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 3) 05:05:26 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 19) 05:05:26 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20028040) dup2(r1, r0) [ 2395.303545] FAULT_INJECTION: forcing a failure. [ 2395.303545] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.305986] CPU: 1 PID: 12461 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2395.307459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.309200] Call Trace: [ 2395.309761] dump_stack+0x107/0x167 [ 2395.310528] should_fail.cold+0x5/0xa [ 2395.311331] ? __delayacct_tsk_init+0x1b/0x80 [ 2395.312270] should_failslab+0x5/0x20 [ 2395.313069] kmem_cache_alloc+0x5b/0x310 [ 2395.313930] __delayacct_tsk_init+0x1b/0x80 [ 2395.314851] copy_process+0x3395/0x78b0 [ 2395.315713] ? stack_trace_save+0x8c/0xc0 [ 2395.316610] ? lock_acquire+0x197/0x470 [ 2395.317465] ? io_sq_thread_park+0x79/0xd0 [ 2395.318390] ? __cleanup_sighand+0xb0/0xb0 [ 2395.319312] ? kernel_text_address+0xf2/0x120 [ 2395.320281] ? find_held_lock+0x2c/0x110 [ 2395.321163] ? io_uring_setup+0x1c23/0x2980 [ 2395.322090] ? lock_downgrade+0x6d0/0x6d0 [ 2395.322994] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2395.324047] create_io_thread+0xb6/0xf0 [ 2395.324900] ? pidfd_prepare+0x80/0x80 [ 2395.325742] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2395.326824] io_uring_setup+0x1d79/0x2980 [ 2395.327727] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2395.328805] ? wait_for_completion_io+0x270/0x270 [ 2395.329860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.330995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.332105] do_syscall_64+0x33/0x40 [ 2395.332894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2395.334002] RIP: 0033:0x7f838ee79b19 [ 2395.334788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.338699] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2395.340345] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2395.341879] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2395.343426] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2395.344963] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2395.346497] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2395.351094] loop2: detected capacity change from 0 to 2048 [ 2395.355753] FAT-fs (loop2): bogus number of reserved sectors [ 2395.356579] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2395.375445] loop2: detected capacity change from 0 to 2048 [ 2395.379230] FAT-fs (loop2): bogus number of reserved sectors [ 2395.380072] FAT-fs (loop2): Can't find a valid FAT filesystem 05:05:26 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') dup2(r0, r1) dup2(r1, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) 05:05:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x31000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:05:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x905, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:05:26 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2395.452362] loop2: detected capacity change from 0 to 2048 05:05:26 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000140)={0x4dc, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) dup2(r1, r0) [ 2395.476599] FAT-fs (loop2): bogus number of reserved sectors [ 2395.477921] FAT-fs (loop2): Can't find a valid FAT filesystem 05:05:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x40000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:05:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xa00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:05:26 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec5978"]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2395.569007] loop2: detected capacity change from 0 to 2560 [ 2395.574204] FAT-fs (loop2): bogus number of reserved sectors [ 2395.575113] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2395.602242] loop2: detected capacity change from 0 to 2560 [ 2395.607329] FAT-fs (loop2): bogus number of reserved sectors [ 2395.608111] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2408.805236] FAULT_INJECTION: forcing a failure. [ 2408.805236] name failslab, interval 1, probability 0, space 0, times 0 [ 2408.806714] CPU: 0 PID: 12515 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2408.807565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2408.808565] Call Trace: [ 2408.808890] dump_stack+0x107/0x167 [ 2408.809335] should_fail.cold+0x5/0xa [ 2408.809795] ? __alloc_file+0x21/0x320 [ 2408.810269] should_failslab+0x5/0x20 [ 2408.810750] kmem_cache_alloc+0x5b/0x310 [ 2408.811240] __alloc_file+0x21/0x320 [ 2408.811688] alloc_empty_file+0x6d/0x170 [ 2408.812182] path_openat+0xe6/0x2770 [ 2408.812634] ? __lock_acquire+0x1657/0x5b00 [ 2408.813159] ? path_lookupat+0x860/0x860 [ 2408.813651] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2408.814280] ? lock_acquire+0x197/0x470 [ 2408.814770] ? find_held_lock+0x2c/0x110 [ 2408.815265] do_filp_open+0x190/0x3e0 [ 2408.815724] ? may_open_dev+0xf0/0xf0 [ 2408.816186] ? alloc_fd+0x2e7/0x670 [ 2408.816626] ? lock_downgrade+0x6d0/0x6d0 [ 2408.817125] ? do_raw_spin_lock+0x121/0x260 [ 2408.817640] ? rwlock_bug.part.0+0x90/0x90 [ 2408.818156] ? _raw_spin_unlock+0x1a/0x30 [ 2408.818655] ? alloc_fd+0x2e7/0x670 [ 2408.819114] do_sys_openat2+0x171/0x4d0 [ 2408.819596] ? build_open_flags+0x6f0/0x6f0 [ 2408.820116] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2408.820700] ? wait_for_completion_io+0x270/0x270 [ 2408.821285] __x64_sys_openat+0x13f/0x1f0 [ 2408.821783] ? __ia32_sys_open+0x1c0/0x1c0 [ 2408.822299] ? ksys_write+0x1a9/0x260 [ 2408.822769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2408.823408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2408.824032] do_syscall_64+0x33/0x40 [ 2408.824479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2408.825107] RIP: 0033:0x7f10a0111a04 [ 2408.825559] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2408.827785] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2408.828711] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2408.829576] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2408.830436] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2408.831312] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2408.832174] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:05:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x7ffffff7, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:05:39 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r2 = dup2(r1, r0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/155, 0x9b}], 0x1, 0x33f1a226, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)=ANY=[@ANYBLOB="008000000000000018000000", @ANYRES32=r0, @ANYBLOB="03000000000000002e2f66696c653000"]) fallocate(r4, 0x0, 0x20000000000, 0xffffffffffffffff) 05:05:39 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 20) 05:05:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 4) 05:05:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x4) 05:05:39 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec5978"]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:05:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xb00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:05:39 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2408.852282] loop2: detected capacity change from 0 to 2560 [ 2408.855897] FAT-fs (loop2): bogus number of reserved sectors [ 2408.856622] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2408.857587] FAULT_INJECTION: forcing a failure. [ 2408.857587] name failslab, interval 1, probability 0, space 0, times 0 [ 2408.860368] CPU: 1 PID: 12522 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2408.862060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2408.864116] Call Trace: [ 2408.864764] dump_stack+0x107/0x167 [ 2408.865658] should_fail.cold+0x5/0xa [ 2408.866592] ? create_object.isra.0+0x3a/0xa20 [ 2408.867722] should_failslab+0x5/0x20 [ 2408.868659] kmem_cache_alloc+0x5b/0x310 [ 2408.869658] create_object.isra.0+0x3a/0xa20 [ 2408.870748] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2408.871990] kmem_cache_alloc+0x159/0x310 [ 2408.873009] __delayacct_tsk_init+0x1b/0x80 [ 2408.874072] copy_process+0x3395/0x78b0 [ 2408.875068] ? stack_trace_save+0x8c/0xc0 [ 2408.876076] ? lock_acquire+0x197/0x470 [ 2408.877043] ? io_sq_thread_park+0x79/0xd0 [ 2408.878095] ? __cleanup_sighand+0xb0/0xb0 [ 2408.879118] ? kernel_text_address+0xf2/0x120 [ 2408.880210] ? find_held_lock+0x2c/0x110 [ 2408.881228] ? io_uring_setup+0x1c23/0x2980 [ 2408.882269] ? lock_downgrade+0x6d0/0x6d0 [ 2408.883304] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2408.884488] create_io_thread+0xb6/0xf0 [ 2408.885454] ? pidfd_prepare+0x80/0x80 05:05:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xc8050000, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2408.886406] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2408.887819] io_uring_setup+0x1d79/0x2980 [ 2408.888849] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2408.890091] ? wait_for_completion_io+0x270/0x270 [ 2408.891314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2408.892607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2408.893871] do_syscall_64+0x33/0x40 [ 2408.894777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2408.896029] RIP: 0033:0x7f838ee79b19 [ 2408.896939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2408.901439] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2408.903312] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2408.905058] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2408.906810] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2408.908559] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2408.910302] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:05:39 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8, 0x1000}}, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') dup2(r3, r0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x7}) write$binfmt_elf64(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x3, 0x4, 0x4, 0x1, 0x0, 0x3e, 0x7, 0xf3, 0x40, 0x15e, 0x8001, 0x6, 0x38, 0x2, 0x84, 0x0, 0x2}, [{0x7, 0x3, 0x0, 0x40, 0xd6, 0xed89, 0xb78b, 0x100}], "eff480dca7f9e931437842787e59711f188a1d0996e81ab3eb9c7f5fe2ff7fec69c648f733f3e7a88f20eed5980205499f928b31a34982c47858b162542a2e34f769d3e15a153836dbd35536e654514562b3427655ae48e753832d1e63b852342f7f9894f5579d4cba167d6782d0fd242b394ab6a548aa8cd76ae30cfe9b3eee056d0b547477a12b059fa0e9f3e6eaebd83a83c3c460d56074610dd042477acfefd02073ec0e8f8120d671149a8d2f36cdcbdf", ['\x00', '\x00']}, 0x32b) [ 2408.988150] loop2: detected capacity change from 0 to 2560 [ 2408.995131] FAT-fs (loop2): bogus number of reserved sectors [ 2408.995955] FAT-fs (loop2): Can't find a valid FAT filesystem 05:05:40 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/raw\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3ff) dup2(r1, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0xffff, 0x7, 0x8f, 0x8}, {0x1, 0x80, 0x7f, 0x9}, {0xff, 0x3, 0x5, 0x80}, {0x0, 0x3, 0xe5, 0x80}, {0x0, 0x1, 0x1f, 0xfffffffe}, {0x1, 0x80, 0x3f, 0x81}, {0x1, 0x24, 0xc0}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000340)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) 05:05:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 5) 05:05:40 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x140, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:05:40 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec5978"]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:05:40 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 21) [ 2409.067093] FAULT_INJECTION: forcing a failure. [ 2409.067093] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.068559] CPU: 0 PID: 12541 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2409.069393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2409.070395] Call Trace: [ 2409.070719] dump_stack+0x107/0x167 [ 2409.071168] should_fail.cold+0x5/0xa [ 2409.071634] ? alloc_pid+0xd7/0xd30 [ 2409.072077] should_failslab+0x5/0x20 [ 2409.072536] kmem_cache_alloc+0x5b/0x310 [ 2409.073029] alloc_pid+0xd7/0xd30 [ 2409.073453] ? copy_namespaces+0x1ca/0x4f0 [ 2409.073968] copy_process+0x3b87/0x78b0 [ 2409.074459] ? stack_trace_save+0x8c/0xc0 [ 2409.075018] ? __cleanup_sighand+0xb0/0xb0 [ 2409.075524] ? kernel_text_address+0xf2/0x120 [ 2409.076066] ? find_held_lock+0x2c/0x110 [ 2409.076558] ? io_uring_setup+0x1c23/0x2980 [ 2409.077078] ? lock_downgrade+0x6d0/0x6d0 [ 2409.077579] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2409.078171] create_io_thread+0xb6/0xf0 [ 2409.078650] ? pidfd_prepare+0x80/0x80 [ 2409.079131] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2409.079729] io_uring_setup+0x1d79/0x2980 [ 2409.080233] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2409.080840] ? wait_for_completion_io+0x270/0x270 [ 2409.081431] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2409.082062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2409.082682] do_syscall_64+0x33/0x40 [ 2409.083137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2409.083757] RIP: 0033:0x7f838ee79b19 [ 2409.084206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2409.086420] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2409.087340] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2409.088207] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2409.089069] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2409.089932] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2409.090805] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2409.105038] FAULT_INJECTION: forcing a failure. [ 2409.105038] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.106421] CPU: 0 PID: 12548 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2409.107268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2409.108271] Call Trace: [ 2409.108595] dump_stack+0x107/0x167 [ 2409.109037] should_fail.cold+0x5/0xa [ 2409.109498] ? create_object.isra.0+0x3a/0xa20 [ 2409.110053] should_failslab+0x5/0x20 [ 2409.110513] kmem_cache_alloc+0x5b/0x310 [ 2409.111022] create_object.isra.0+0x3a/0xa20 [ 2409.111555] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2409.112174] kmem_cache_alloc+0x159/0x310 [ 2409.112680] __alloc_file+0x21/0x320 [ 2409.113131] alloc_empty_file+0x6d/0x170 [ 2409.113622] path_openat+0xe6/0x2770 [ 2409.114073] ? __lock_acquire+0x1657/0x5b00 [ 2409.114598] ? path_lookupat+0x860/0x860 [ 2409.115100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2409.115734] ? lock_acquire+0x197/0x470 [ 2409.116214] ? find_held_lock+0x2c/0x110 [ 2409.116707] do_filp_open+0x190/0x3e0 [ 2409.117167] ? may_open_dev+0xf0/0xf0 [ 2409.117632] ? alloc_fd+0x2e7/0x670 [ 2409.118073] ? lock_downgrade+0x6d0/0x6d0 [ 2409.118576] ? do_raw_spin_lock+0x121/0x260 [ 2409.119105] ? rwlock_bug.part.0+0x90/0x90 [ 2409.119619] ? _raw_spin_unlock+0x1a/0x30 [ 2409.120119] ? alloc_fd+0x2e7/0x670 [ 2409.120568] do_sys_openat2+0x171/0x4d0 [ 2409.121050] ? build_open_flags+0x6f0/0x6f0 [ 2409.121569] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2409.122156] ? wait_for_completion_io+0x270/0x270 [ 2409.122750] __x64_sys_openat+0x13f/0x1f0 [ 2409.123256] ? __ia32_sys_open+0x1c0/0x1c0 [ 2409.123768] ? ksys_write+0x1a9/0x260 [ 2409.124234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2409.124872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2409.125500] do_syscall_64+0x33/0x40 [ 2409.125951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2409.126572] RIP: 0033:0x7f10a0111a04 [ 2409.127031] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2409.129257] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2409.130175] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2409.131046] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2409.131921] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2409.132783] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2409.133651] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:05:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xd00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:05:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xeffdffff, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2409.211235] loop2: detected capacity change from 0 to 3072 [ 2409.233855] FAT-fs (loop2): bogus number of reserved sectors [ 2409.234599] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2409.258378] loop2: detected capacity change from 0 to 3072 [ 2409.268041] FAT-fs (loop2): bogus number of reserved sectors [ 2409.268762] FAT-fs (loop2): Can't find a valid FAT filesystem 05:05:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x8) 05:05:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xe00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:05:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xf7ffff7f, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:05:53 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 22) 05:05:53 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') dup2(r1, r0) fcntl$addseals(r1, 0x409, 0x9) 05:05:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 6) 05:05:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2422.671466] loop2: detected capacity change from 0 to 3584 [ 2422.677320] FAULT_INJECTION: forcing a failure. [ 2422.677320] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.679788] CPU: 1 PID: 12585 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2422.681268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.683104] Call Trace: [ 2422.683688] dump_stack+0x107/0x167 [ 2422.684460] should_fail.cold+0x5/0xa [ 2422.685265] ? security_file_alloc+0x34/0x170 [ 2422.686216] should_failslab+0x5/0x20 [ 2422.687051] kmem_cache_alloc+0x5b/0x310 [ 2422.687920] security_file_alloc+0x34/0x170 [ 2422.688831] __alloc_file+0xb7/0x320 [ 2422.689617] alloc_empty_file+0x6d/0x170 [ 2422.690476] path_openat+0xe6/0x2770 [ 2422.691271] ? __lock_acquire+0x1657/0x5b00 [ 2422.692202] ? path_lookupat+0x860/0x860 [ 2422.693062] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 05:05:53 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x140, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2422.694166] ? lock_acquire+0x197/0x470 [ 2422.695195] ? find_held_lock+0x2c/0x110 [ 2422.696069] do_filp_open+0x190/0x3e0 [ 2422.696873] ? may_open_dev+0xf0/0xf0 [ 2422.697684] ? alloc_fd+0x2e7/0x670 [ 2422.698457] ? lock_downgrade+0x6d0/0x6d0 [ 2422.699344] ? do_raw_spin_lock+0x121/0x260 [ 2422.700263] ? rwlock_bug.part.0+0x90/0x90 [ 2422.701169] ? _raw_spin_unlock+0x1a/0x30 [ 2422.702043] ? alloc_fd+0x2e7/0x670 [ 2422.702822] do_sys_openat2+0x171/0x4d0 [ 2422.703679] ? build_open_flags+0x6f0/0x6f0 [ 2422.704588] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2422.705615] ? wait_for_completion_io+0x270/0x270 [ 2422.706640] __x64_sys_openat+0x13f/0x1f0 [ 2422.707532] ? __ia32_sys_open+0x1c0/0x1c0 [ 2422.708431] ? ksys_write+0x1a9/0x260 [ 2422.709242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.710359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2422.711466] do_syscall_64+0x33/0x40 [ 2422.712254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 05:05:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xff030000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:05:53 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r2 = dup2(r1, r0) fdatasync(r2) [ 2422.713344] RIP: 0033:0x7f10a0111a04 [ 2422.714241] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2422.718187] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2422.719824] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2422.721344] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2422.722863] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2422.724375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2422.725885] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2422.733415] FAULT_INJECTION: forcing a failure. [ 2422.733415] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.734965] CPU: 0 PID: 12587 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2422.735882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.736987] Call Trace: [ 2422.737360] dump_stack+0x107/0x167 [ 2422.737867] should_fail.cold+0x5/0xa [ 2422.738397] ? create_object.isra.0+0x3a/0xa20 [ 2422.739026] should_failslab+0x5/0x20 [ 2422.739545] kmem_cache_alloc+0x5b/0x310 [ 2422.740107] create_object.isra.0+0x3a/0xa20 [ 2422.740714] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2422.741409] kmem_cache_alloc+0x159/0x310 [ 2422.741981] alloc_pid+0xd7/0xd30 [ 2422.742463] ? copy_namespaces+0x1ca/0x4f0 [ 2422.743064] copy_process+0x3b87/0x78b0 [ 2422.743619] ? stack_trace_save+0x8c/0xc0 [ 2422.744200] ? __cleanup_sighand+0xb0/0xb0 [ 2422.744764] ? kernel_text_address+0xf2/0x120 [ 2422.745384] ? find_held_lock+0x2c/0x110 [ 2422.745948] ? io_uring_setup+0x1c23/0x2980 [ 2422.746535] ? lock_downgrade+0x6d0/0x6d0 [ 2422.747109] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2422.747763] create_io_thread+0xb6/0xf0 [ 2422.748297] ? pidfd_prepare+0x80/0x80 [ 2422.748842] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2422.749508] io_uring_setup+0x1d79/0x2980 [ 2422.750081] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2422.750760] ? wait_for_completion_io+0x270/0x270 [ 2422.751438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.752158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2422.752850] do_syscall_64+0x33/0x40 [ 2422.753372] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.754051] RIP: 0033:0x7f838ee79b19 [ 2422.754559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.756979] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2422.757999] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2422.758955] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2422.759886] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2422.760811] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2422.761749] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2422.767575] FAT-fs (loop2): bogus number of reserved sectors [ 2422.768569] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2422.794535] loop2: detected capacity change from 0 to 3584 [ 2422.812145] FAT-fs (loop2): bogus number of reserved sectors [ 2422.813200] FAT-fs (loop2): Can't find a valid FAT filesystem 05:05:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 7) 05:05:53 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x140, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:05:53 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 1) 05:05:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xf00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2422.886197] FAULT_INJECTION: forcing a failure. [ 2422.886197] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.887648] CPU: 0 PID: 12604 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2422.888521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.889556] Call Trace: [ 2422.889894] dump_stack+0x107/0x167 [ 2422.890341] should_fail.cold+0x5/0xa [ 2422.890811] ? create_object.isra.0+0x3a/0xa20 [ 2422.891382] should_failslab+0x5/0x20 [ 2422.891859] kmem_cache_alloc+0x5b/0x310 [ 2422.892368] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2422.893049] create_object.isra.0+0x3a/0xa20 [ 2422.893595] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2422.894226] kmem_cache_alloc+0x159/0x310 [ 2422.894746] security_file_alloc+0x34/0x170 [ 2422.895288] __alloc_file+0xb7/0x320 [ 2422.895750] alloc_empty_file+0x6d/0x170 [ 2422.896268] path_openat+0xe6/0x2770 [ 2422.896728] ? __lock_acquire+0x1657/0x5b00 [ 2422.897275] ? path_lookupat+0x860/0x860 [ 2422.897779] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2422.898433] ? lock_acquire+0x197/0x470 [ 2422.898940] ? find_held_lock+0x2c/0x110 [ 2422.899447] do_filp_open+0x190/0x3e0 [ 2422.899922] ? may_open_dev+0xf0/0xf0 [ 2422.900397] ? alloc_fd+0x2e7/0x670 [ 2422.900849] ? lock_downgrade+0x6d0/0x6d0 [ 2422.901354] ? do_raw_spin_lock+0x121/0x260 [ 2422.901883] ? rwlock_bug.part.0+0x90/0x90 [ 2422.902410] ? _raw_spin_unlock+0x1a/0x30 [ 2422.902931] ? alloc_fd+0x2e7/0x670 [ 2422.903390] do_sys_openat2+0x171/0x4d0 [ 2422.903884] ? build_open_flags+0x6f0/0x6f0 [ 2422.904418] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2422.905013] ? wait_for_completion_io+0x270/0x270 [ 2422.905609] __x64_sys_openat+0x13f/0x1f0 [ 2422.906120] ? __ia32_sys_open+0x1c0/0x1c0 [ 2422.906642] ? ksys_write+0x1a9/0x260 [ 2422.907125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.907773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2422.908409] do_syscall_64+0x33/0x40 [ 2422.908869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.909502] RIP: 0033:0x7f10a0111a04 [ 2422.909959] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2422.912205] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2422.913140] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2422.914027] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2422.914910] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2422.915789] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2422.916677] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:05:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:05:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xfffffdef, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2422.939228] FAULT_INJECTION: forcing a failure. [ 2422.939228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2422.943063] CPU: 1 PID: 12608 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2422.944544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.946304] Call Trace: [ 2422.946878] dump_stack+0x107/0x167 [ 2422.947646] should_fail.cold+0x5/0xa [ 2422.948460] _copy_from_user+0x2e/0x1b0 [ 2422.949302] io_uring_setup+0x9b/0x2980 [ 2422.950134] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2422.951176] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2422.952235] ? wait_for_completion_io+0x270/0x270 [ 2422.953258] ? rcu_read_lock_any_held+0x75/0xa0 [ 2422.954235] ? vfs_write+0x354/0xb10 [ 2422.955027] ? fput_many+0x2f/0x1a0 [ 2422.955792] ? ksys_write+0x1a9/0x260 [ 2422.956599] ? __ia32_sys_read+0xb0/0xb0 [ 2422.957457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.958567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2422.959676] do_syscall_64+0x33/0x40 [ 2422.960468] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.961543] RIP: 0033:0x7f9c3da0ab19 [ 2422.962336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.966235] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2422.967845] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2422.969341] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2422.970834] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2422.972345] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2422.973843] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2423.024371] loop2: detected capacity change from 0 to 3584 [ 2423.031752] FAT-fs (loop2): bogus number of reserved sectors [ 2423.033149] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2423.048419] loop2: detected capacity change from 0 to 3584 [ 2423.053341] FAT-fs (loop2): bogus number of reserved sectors [ 2423.054641] FAT-fs (loop2): Can't find a valid FAT filesystem 05:06:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 8) 05:06:11 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:06:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x9) 05:06:11 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 23) 05:06:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xffffff7f, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:06:11 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 2) 05:06:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1020, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:06:11 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2440.002387] FAULT_INJECTION: forcing a failure. [ 2440.002387] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.005032] CPU: 1 PID: 12633 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2440.006726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.008802] Call Trace: [ 2440.009463] dump_stack+0x107/0x167 [ 2440.010350] should_fail.cold+0x5/0xa [ 2440.011313] ? io_uring_setup+0x258/0x2980 [ 2440.012370] should_failslab+0x5/0x20 [ 2440.013021] FAULT_INJECTION: forcing a failure. [ 2440.013021] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.013312] kmem_cache_alloc_trace+0x55/0x320 [ 2440.015888] io_uring_setup+0x258/0x2980 [ 2440.016900] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2440.018111] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2440.019387] ? wait_for_completion_io+0x270/0x270 [ 2440.020622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2440.021923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.023232] do_syscall_64+0x33/0x40 [ 2440.024168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2440.025440] RIP: 0033:0x7f9c3da0ab19 [ 2440.026372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.030998] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2440.032948] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2440.034734] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2440.036550] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2440.038367] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2440.040174] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2440.042020] CPU: 0 PID: 12628 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2440.042920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.043986] Call Trace: [ 2440.044329] dump_stack+0x107/0x167 [ 2440.044791] should_fail.cold+0x5/0xa [ 2440.045276] ? proc_thread_self_get_link+0x1a8/0x210 [ 2440.045925] should_failslab+0x5/0x20 [ 2440.046408] kmem_cache_alloc_trace+0x55/0x320 [ 2440.047027] proc_thread_self_get_link+0x1a8/0x210 [ 2440.047771] ? proc_setup_self+0x390/0x390 [ 2440.048413] step_into+0x1595/0x1ce0 [ 2440.048890] ? lookup_fast+0x6e0/0x6e0 [ 2440.049381] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2440.049967] walk_component+0x171/0x6a0 [ 2440.050467] ? trace_hardirqs_on+0x5b/0x180 [ 2440.051019] ? handle_dots.part.0+0x15c0/0x15c0 [ 2440.051610] ? security_inode_permission+0xcb/0x100 [ 2440.052240] link_path_walk.part.0+0x699/0xbf0 [ 2440.052824] ? walk_component+0x6a0/0x6a0 [ 2440.053351] ? percpu_counter_add_batch+0x8b/0x140 [ 2440.053983] path_openat+0x25d/0x2770 [ 2440.054469] ? path_lookupat+0x860/0x860 [ 2440.054986] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2440.055653] ? lock_acquire+0x197/0x470 [ 2440.056155] ? find_held_lock+0x2c/0x110 [ 2440.056690] do_filp_open+0x190/0x3e0 [ 2440.057171] ? may_open_dev+0xf0/0xf0 [ 2440.057663] ? rwlock_bug.part.0+0x90/0x90 [ 2440.058197] ? _raw_spin_unlock+0x1a/0x30 [ 2440.058729] ? alloc_fd+0x2e7/0x670 [ 2440.059215] do_sys_openat2+0x171/0x4d0 [ 2440.059715] ? build_open_flags+0x6f0/0x6f0 [ 2440.060255] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2440.060872] ? wait_for_completion_io+0x270/0x270 [ 2440.061487] __x64_sys_openat+0x13f/0x1f0 [ 2440.062006] ? __ia32_sys_open+0x1c0/0x1c0 [ 2440.062542] ? ksys_write+0x1a9/0x260 [ 2440.063033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2440.063700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.064364] do_syscall_64+0x33/0x40 [ 2440.064855] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2440.065497] RIP: 0033:0x7f10a0111a04 [ 2440.065977] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2440.068265] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2440.069207] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2440.070098] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2440.070988] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2440.071885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2440.072791] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2440.079033] FAULT_INJECTION: forcing a failure. [ 2440.079033] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.080603] CPU: 0 PID: 12644 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2440.081543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.082577] Call Trace: [ 2440.082924] dump_stack+0x107/0x167 [ 2440.083395] should_fail.cold+0x5/0xa [ 2440.083871] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2440.084513] should_failslab+0x5/0x20 [ 2440.084991] kmem_cache_alloc_trace+0x55/0x320 [ 2440.085579] io_uring_alloc_task_context+0x99/0x6a0 [ 2440.086211] ? io_import_iovec+0x1120/0x1120 [ 2440.086776] io_uring_setup+0x1dd1/0x2980 [ 2440.087298] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2440.087927] ? wait_for_completion_io+0x270/0x270 [ 2440.088537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2440.089194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.089843] do_syscall_64+0x33/0x40 [ 2440.090303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2440.090937] RIP: 0033:0x7f838ee79b19 [ 2440.091401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.093711] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2440.094676] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2440.095562] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2440.096463] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2440.097345] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2440.098248] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2440.099576] loop2: detected capacity change from 0 to 4096 [ 2440.105064] FAT-fs (loop2): bogus number of reserved sectors [ 2440.105779] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2440.116108] loop2: detected capacity change from 0 to 4096 [ 2440.118495] FAT-fs (loop2): bogus number of reserved sectors [ 2440.119316] FAT-fs (loop2): Can't find a valid FAT filesystem 05:06:11 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 3) 05:06:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1100, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:06:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x4000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2440.188067] FAULT_INJECTION: forcing a failure. [ 2440.188067] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.189575] CPU: 0 PID: 12653 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2440.190417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.191442] Call Trace: [ 2440.191774] dump_stack+0x107/0x167 [ 2440.192234] should_fail.cold+0x5/0xa [ 2440.192701] ? create_object.isra.0+0x3a/0xa20 [ 2440.193261] should_failslab+0x5/0x20 [ 2440.193737] kmem_cache_alloc+0x5b/0x310 [ 2440.194241] create_object.isra.0+0x3a/0xa20 [ 2440.194773] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2440.195399] kmem_cache_alloc_trace+0x151/0x320 [ 2440.195972] io_uring_setup+0x258/0x2980 [ 2440.196468] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2440.197056] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2440.197673] ? wait_for_completion_io+0x270/0x270 [ 2440.198282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2440.198926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.199564] do_syscall_64+0x33/0x40 [ 2440.200020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2440.200644] RIP: 0033:0x7f9c3da0ab19 [ 2440.201099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.203366] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2440.204304] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2440.205180] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2440.206049] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2440.206923] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2440.207806] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:06:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 9) 05:06:11 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:06:11 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 24) [ 2440.229075] loop2: detected capacity change from 0 to 4096 [ 2440.254361] FAT-fs (loop2): bogus number of reserved sectors [ 2440.255235] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2440.260381] FAULT_INJECTION: forcing a failure. [ 2440.260381] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.263130] CPU: 1 PID: 12664 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2440.264715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.266604] Call Trace: [ 2440.267218] dump_stack+0x107/0x167 [ 2440.268054] should_fail.cold+0x5/0xa [ 2440.268925] ? create_object.isra.0+0x3a/0xa20 [ 2440.269973] should_failslab+0x5/0x20 [ 2440.270846] kmem_cache_alloc+0x5b/0x310 [ 2440.271795] create_object.isra.0+0x3a/0xa20 [ 2440.272796] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2440.273962] kmem_cache_alloc_trace+0x151/0x320 [ 2440.275039] io_uring_alloc_task_context+0x99/0x6a0 [ 2440.276191] ? io_import_iovec+0x1120/0x1120 [ 2440.277213] io_uring_setup+0x1dd1/0x2980 [ 2440.278165] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2440.279328] ? wait_for_completion_io+0x270/0x270 [ 2440.280450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2440.281648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.282827] do_syscall_64+0x33/0x40 [ 2440.283686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2440.284853] RIP: 0033:0x7f838ee79b19 [ 2440.285701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.289911] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2440.291658] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2440.293289] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2440.294913] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2440.296545] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2440.298171] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:06:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1201, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:06:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x8000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:06:11 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:06:11 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2440.464684] FAULT_INJECTION: forcing a failure. [ 2440.464684] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.467306] CPU: 1 PID: 12666 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2440.468886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.470775] Call Trace: [ 2440.471389] dump_stack+0x107/0x167 [ 2440.472228] should_fail.cold+0x5/0xa [ 2440.473095] ? find_held_lock+0x2c/0x110 [ 2440.474025] ? create_object.isra.0+0x3a/0xa20 [ 2440.475083] should_failslab+0x5/0x20 [ 2440.475957] kmem_cache_alloc+0x5b/0x310 [ 2440.476879] ? __task_pid_nr_ns+0x16a/0x4f0 [ 2440.477869] create_object.isra.0+0x3a/0xa20 [ 2440.478873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2440.480054] kmem_cache_alloc_trace+0x151/0x320 [ 2440.481116] proc_thread_self_get_link+0x1a8/0x210 [ 2440.482233] ? proc_setup_self+0x390/0x390 [ 2440.483205] step_into+0x1595/0x1ce0 [ 2440.484058] ? lookup_fast+0x6e0/0x6e0 [ 2440.484942] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2440.485972] walk_component+0x171/0x6a0 [ 2440.486884] ? trace_hardirqs_on+0x5b/0x180 [ 2440.487876] ? handle_dots.part.0+0x15c0/0x15c0 [ 2440.488940] ? security_inode_permission+0xcb/0x100 [ 2440.490087] link_path_walk.part.0+0x699/0xbf0 [ 2440.491141] ? walk_component+0x6a0/0x6a0 [ 2440.492081] ? percpu_counter_add_batch+0x8b/0x140 [ 2440.493209] path_openat+0x25d/0x2770 [ 2440.494090] ? path_lookupat+0x860/0x860 [ 2440.495034] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2440.496226] ? lock_acquire+0x197/0x470 [ 2440.497129] ? find_held_lock+0x2c/0x110 [ 2440.498067] do_filp_open+0x190/0x3e0 [ 2440.498941] ? may_open_dev+0xf0/0xf0 [ 2440.499823] ? rwlock_bug.part.0+0x90/0x90 [ 2440.500799] ? _raw_spin_unlock+0x1a/0x30 [ 2440.501746] ? alloc_fd+0x2e7/0x670 [ 2440.502584] do_sys_openat2+0x171/0x4d0 [ 2440.503499] ? build_open_flags+0x6f0/0x6f0 [ 2440.504478] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2440.505574] ? wait_for_completion_io+0x270/0x270 [ 2440.506689] __x64_sys_openat+0x13f/0x1f0 [ 2440.507642] ? __ia32_sys_open+0x1c0/0x1c0 [ 2440.508609] ? ksys_write+0x1a9/0x260 [ 2440.509487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2440.510679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.511865] do_syscall_64+0x33/0x40 [ 2440.512711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2440.513882] RIP: 0033:0x7f10a0111a04 [ 2440.514729] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2440.518910] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2440.520644] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2440.522269] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2440.523901] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2440.525525] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2440.527147] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:06:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 10) 05:06:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xe) 05:06:25 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 4) 05:06:25 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 25) 05:06:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1330, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:06:25 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:06:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x20000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:06:25 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2454.910767] FAULT_INJECTION: forcing a failure. [ 2454.910767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2454.913470] CPU: 1 PID: 12695 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2454.914976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.916774] Call Trace: [ 2454.917346] dump_stack+0x107/0x167 [ 2454.918130] should_fail.cold+0x5/0xa [ 2454.918951] __alloc_pages_nodemask+0x182/0x600 [ 2454.919967] ? lock_release+0x680/0x680 [ 2454.920824] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2454.922123] ? lock_downgrade+0x6d0/0x6d0 [ 2454.923020] alloc_pages_current+0x187/0x280 [ 2454.923975] kmalloc_order+0x35/0x160 [ 2454.924796] kmalloc_order_trace+0x14/0xa0 [ 2454.925703] io_uring_setup+0x33c/0x2980 [ 2454.926576] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2454.927624] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2454.928710] ? wait_for_completion_io+0x270/0x270 [ 2454.929767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2454.930893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2454.932017] do_syscall_64+0x33/0x40 [ 2454.932814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2454.933912] RIP: 0033:0x7f9c3da0ab19 [ 2454.934708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.938675] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2454.940305] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2454.941835] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2454.943369] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2454.944900] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2454.946425] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2454.957163] FAULT_INJECTION: forcing a failure. [ 2454.957163] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.959993] CPU: 1 PID: 12704 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2454.961503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.963334] Call Trace: [ 2454.963910] dump_stack+0x107/0x167 [ 2454.964701] should_fail.cold+0x5/0xa [ 2454.965531] ? __d_alloc+0x2a/0x990 [ 2454.966323] should_failslab+0x5/0x20 [ 2454.967165] kmem_cache_alloc+0x5b/0x310 [ 2454.968065] __d_alloc+0x2a/0x990 [ 2454.968824] d_alloc_parallel+0x111/0x1bc0 [ 2454.969765] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2454.970666] ? lock_acquire+0x197/0x470 [ 2454.971552] ? find_held_lock+0x2c/0x110 [ 2454.972431] ? lockdep_init_map_type+0x2c7/0x780 [ 2454.973447] ? lockdep_init_map_type+0x2c7/0x780 [ 2454.974451] __lookup_slow+0x193/0x490 [ 2454.975293] ? lookup_open.isra.0+0x1270/0x1270 [ 2454.976411] ? selinux_inode_permission+0x401/0x640 [ 2454.977467] ? selinux_path_notify+0x4d0/0x4d0 [ 2454.978440] walk_component+0x41e/0x6a0 [ 2454.979298] ? handle_dots.part.0+0x15c0/0x15c0 [ 2454.980288] ? security_inode_permission+0xcb/0x100 [ 2454.981364] link_path_walk.part.0+0x699/0xbf0 [ 2454.982342] ? walk_component+0x6a0/0x6a0 [ 2454.983231] ? percpu_counter_add_batch+0x8b/0x140 [ 2454.984285] path_openat+0x25d/0x2770 [ 2454.985110] ? path_lookupat+0x860/0x860 [ 2454.985981] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2454.987096] ? lock_acquire+0x197/0x470 [ 2454.987955] ? find_held_lock+0x2c/0x110 [ 2454.988827] do_filp_open+0x190/0x3e0 [ 2454.989633] ? may_open_dev+0xf0/0xf0 [ 2454.990454] ? simple_attr_release+0x50/0x50 [ 2454.991401] ? _raw_spin_unlock+0x1a/0x30 [ 2454.992284] ? alloc_fd+0x2e7/0x670 [ 2454.993070] do_sys_openat2+0x171/0x4d0 [ 2454.993924] ? build_open_flags+0x6f0/0x6f0 [ 2454.994841] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2454.995885] ? wait_for_completion_io+0x270/0x270 [ 2454.996916] __x64_sys_openat+0x13f/0x1f0 [ 2454.997796] ? __ia32_sys_open+0x1c0/0x1c0 [ 2454.998693] ? ksys_write+0x1a9/0x260 [ 2454.999520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2455.000630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2455.001727] do_syscall_64+0x33/0x40 [ 2455.002517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2455.003614] RIP: 0033:0x7f10a0111a04 [ 2455.004413] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2455.008357] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2455.009984] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2455.011513] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2455.013025] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2455.014542] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2455.016061] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2455.021432] loop2: detected capacity change from 0 to 4608 05:06:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x40030000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2455.067397] FAT-fs (loop2): bogus number of reserved sectors [ 2455.068963] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2455.082499] FAULT_INJECTION: forcing a failure. [ 2455.082499] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.084961] CPU: 1 PID: 12702 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2455.086445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2455.088231] Call Trace: [ 2455.088797] dump_stack+0x107/0x167 [ 2455.089575] should_fail.cold+0x5/0xa [ 2455.090395] ? create_object.isra.0+0x3a/0xa20 [ 2455.091379] should_failslab+0x5/0x20 [ 2455.092197] kmem_cache_alloc+0x5b/0x310 [ 2455.093074] create_object.isra.0+0x3a/0xa20 [ 2455.094024] kmemleak_alloc_percpu+0xa0/0x100 [ 2455.094990] pcpu_alloc+0x4e2/0x1240 [ 2455.095807] __percpu_counter_init+0x10d/0x2d0 [ 2455.096793] io_uring_alloc_task_context+0xcc/0x6a0 [ 2455.097869] ? io_import_iovec+0x1120/0x1120 [ 2455.098823] io_uring_setup+0x1dd1/0x2980 [ 2455.099724] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2455.100805] ? wait_for_completion_io+0x270/0x270 [ 2455.101854] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2455.102974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2455.104119] do_syscall_64+0x33/0x40 [ 2455.104914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2455.106011] RIP: 0033:0x7f838ee79b19 [ 2455.106790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2455.110666] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2455.112294] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2455.113827] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2455.115368] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2455.116898] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2455.118427] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:06:26 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 5) 05:06:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 11) [ 2455.140356] loop2: detected capacity change from 0 to 4608 [ 2455.149397] FAULT_INJECTION: forcing a failure. [ 2455.149397] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.151843] CPU: 1 PID: 12713 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2455.153341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2455.155109] Call Trace: [ 2455.155679] dump_stack+0x107/0x167 [ 2455.156459] should_fail.cold+0x5/0xa [ 2455.157272] ? create_object.isra.0+0x3a/0xa20 [ 2455.158242] should_failslab+0x5/0x20 [ 2455.159054] kmem_cache_alloc+0x5b/0x310 [ 2455.159925] create_object.isra.0+0x3a/0xa20 [ 2455.160862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2455.161965] kmem_cache_alloc+0x159/0x310 [ 2455.162857] __d_alloc+0x2a/0x990 [ 2455.163610] d_alloc_parallel+0x111/0x1bc0 [ 2455.164528] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2455.165409] ? lock_acquire+0x197/0x470 [ 2455.166260] ? find_held_lock+0x2c/0x110 [ 2455.167131] ? lockdep_init_map_type+0x2c7/0x780 [ 2455.168144] ? lockdep_init_map_type+0x2c7/0x780 [ 2455.169165] __lookup_slow+0x193/0x490 [ 2455.169993] ? lookup_open.isra.0+0x1270/0x1270 [ 2455.171010] ? selinux_inode_permission+0x401/0x640 [ 2455.172078] ? selinux_path_notify+0x4d0/0x4d0 [ 2455.173052] walk_component+0x41e/0x6a0 [ 2455.173893] ? handle_dots.part.0+0x15c0/0x15c0 [ 2455.174886] ? security_inode_permission+0xcb/0x100 [ 2455.175967] link_path_walk.part.0+0x699/0xbf0 [ 2455.176954] ? walk_component+0x6a0/0x6a0 [ 2455.177838] ? percpu_counter_add_batch+0x8b/0x140 [ 2455.178898] path_openat+0x25d/0x2770 [ 2455.179735] ? path_lookupat+0x860/0x860 [ 2455.180610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2455.181724] ? lock_acquire+0x197/0x470 05:06:26 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2455.182571] ? find_held_lock+0x2c/0x110 [ 2455.183694] do_filp_open+0x190/0x3e0 [ 2455.184528] ? may_open_dev+0xf0/0xf0 [ 2455.185351] ? simple_attr_release+0x50/0x50 [ 2455.186300] ? _raw_spin_unlock+0x1a/0x30 [ 2455.186579] FAULT_INJECTION: forcing a failure. [ 2455.186579] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.187189] ? alloc_fd+0x2e7/0x670 [ 2455.187252] do_sys_openat2+0x171/0x4d0 [ 2455.191376] ? build_open_flags+0x6f0/0x6f0 [ 2455.192287] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2455.193311] ? wait_for_completion_io+0x270/0x270 [ 2455.194346] __x64_sys_openat+0x13f/0x1f0 [ 2455.195235] ? __ia32_sys_open+0x1c0/0x1c0 [ 2455.196139] ? ksys_write+0x1a9/0x260 [ 2455.196962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2455.198084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2455.199188] do_syscall_64+0x33/0x40 [ 2455.199985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2455.201072] RIP: 0033:0x7f10a0111a04 [ 2455.201863] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2455.205777] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2455.207404] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2455.208908] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2455.210413] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2455.211925] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2455.213437] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2455.214995] CPU: 0 PID: 12718 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2455.216642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2455.218569] Call Trace: [ 2455.219215] dump_stack+0x107/0x167 [ 2455.220064] should_fail.cold+0x5/0xa [ 2455.220938] ? create_object.isra.0+0x3a/0xa20 [ 2455.222008] should_failslab+0x5/0x20 [ 2455.222888] kmem_cache_alloc+0x5b/0x310 [ 2455.223859] create_object.isra.0+0x3a/0xa20 [ 2455.224876] ? kasan_unpoison_shadow+0x33/0x50 [ 2455.225932] kmalloc_order+0xfe/0x160 [ 2455.226828] kmalloc_order_trace+0x14/0xa0 [ 2455.227834] io_uring_setup+0x33c/0x2980 [ 2455.228773] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2455.229887] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2455.231073] ? wait_for_completion_io+0x270/0x270 [ 2455.232399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2455.233870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2455.235282] do_syscall_64+0x33/0x40 [ 2455.236283] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2455.237464] RIP: 0033:0x7f9c3da0ab19 [ 2455.238332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2455.242559] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2455.244322] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2455.245964] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2455.247628] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2455.249255] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2455.250916] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2455.255460] FAT-fs (loop2): bogus number of reserved sectors [ 2455.257006] FAT-fs (loop2): Can't find a valid FAT filesystem 05:06:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 12) [ 2455.440631] FAULT_INJECTION: forcing a failure. [ 2455.440631] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.443140] CPU: 1 PID: 12725 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2455.444618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2455.446369] Call Trace: [ 2455.446939] dump_stack+0x107/0x167 [ 2455.447719] should_fail.cold+0x5/0xa [ 2455.448524] ? proc_alloc_inode+0x18/0x200 [ 2455.449422] should_failslab+0x5/0x20 [ 2455.450223] kmem_cache_alloc+0x5b/0x310 [ 2455.451082] ? find_held_lock+0x2c/0x110 [ 2455.451941] ? proc_free_inode+0x20/0x20 [ 2455.452799] proc_alloc_inode+0x18/0x200 [ 2455.453652] ? proc_free_inode+0x20/0x20 [ 2455.454513] alloc_inode+0x63/0x240 [ 2455.455288] new_inode+0x23/0x250 [ 2455.456027] proc_pid_make_inode+0x22/0x220 [ 2455.456933] proc_pident_instantiate+0x81/0x320 [ 2455.457914] proc_pident_lookup+0x1eb/0x270 [ 2455.458828] __lookup_slow+0x252/0x490 [ 2455.459665] ? lookup_open.isra.0+0x1270/0x1270 [ 2455.460669] ? selinux_inode_permission+0x401/0x640 [ 2455.461729] ? selinux_path_notify+0x4d0/0x4d0 [ 2455.462703] walk_component+0x41e/0x6a0 [ 2455.463545] ? handle_dots.part.0+0x15c0/0x15c0 [ 2455.464525] ? security_inode_permission+0xcb/0x100 [ 2455.465583] link_path_walk.part.0+0x699/0xbf0 [ 2455.466554] ? walk_component+0x6a0/0x6a0 [ 2455.467435] ? percpu_counter_add_batch+0x8b/0x140 [ 2455.468482] path_openat+0x25d/0x2770 [ 2455.469298] ? path_lookupat+0x860/0x860 [ 2455.470158] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2455.471272] ? lock_acquire+0x197/0x470 [ 2455.472107] ? find_held_lock+0x2c/0x110 [ 2455.472974] do_filp_open+0x190/0x3e0 [ 2455.473773] ? may_open_dev+0xf0/0xf0 [ 2455.474599] ? simple_attr_release+0x50/0x50 [ 2455.475560] ? _raw_spin_unlock+0x1a/0x30 [ 2455.476445] ? alloc_fd+0x2e7/0x670 [ 2455.477231] do_sys_openat2+0x171/0x4d0 [ 2455.478084] ? build_open_flags+0x6f0/0x6f0 [ 2455.478987] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2455.480017] ? wait_for_completion_io+0x270/0x270 [ 2455.481050] __x64_sys_openat+0x13f/0x1f0 [ 2455.481923] ? __ia32_sys_open+0x1c0/0x1c0 [ 2455.482822] ? ksys_write+0x1a9/0x260 [ 2455.483642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2455.484756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2455.485849] do_syscall_64+0x33/0x40 [ 2455.486636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2455.487728] RIP: 0033:0x7f10a0111a04 [ 2455.488516] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2455.492384] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2455.493990] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2455.495503] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2455.496993] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2455.498486] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2455.499995] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:06:42 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 6) 05:06:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x11) 05:06:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 13) [ 2471.395328] FAULT_INJECTION: forcing a failure. [ 2471.395328] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.396926] CPU: 1 PID: 12735 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2471.397754] FAULT_INJECTION: forcing a failure. [ 2471.397754] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.397846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.397853] Call Trace: [ 2471.397872] dump_stack+0x107/0x167 [ 2471.397890] should_fail.cold+0x5/0xa [ 2471.397914] ? io_uring_setup+0x40b/0x2980 [ 2471.403450] should_failslab+0x5/0x20 [ 2471.403975] kmem_cache_alloc_trace+0x55/0x320 [ 2471.404584] io_uring_setup+0x40b/0x2980 [ 2471.405131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2471.405777] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2471.406443] ? wait_for_completion_io+0x270/0x270 [ 2471.407099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.407818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.408506] do_syscall_64+0x33/0x40 [ 2471.408999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.409678] RIP: 0033:0x7f9c3da0ab19 [ 2471.410168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2471.412591] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2471.413588] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2471.414510] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2471.415459] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2471.416399] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2471.417333] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2471.418322] CPU: 0 PID: 12737 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2471.419911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.421793] Call Trace: [ 2471.422397] dump_stack+0x107/0x167 [ 2471.423232] should_fail.cold+0x5/0xa [ 2471.424352] ? create_object.isra.0+0x3a/0xa20 [ 2471.425387] should_failslab+0x5/0x20 [ 2471.426252] kmem_cache_alloc+0x5b/0x310 [ 2471.427191] create_object.isra.0+0x3a/0xa20 [ 2471.428201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2471.429353] kmem_cache_alloc+0x159/0x310 [ 2471.430295] ? find_held_lock+0x2c/0x110 [ 2471.431213] ? proc_free_inode+0x20/0x20 [ 2471.432137] proc_alloc_inode+0x18/0x200 [ 2471.433065] ? proc_free_inode+0x20/0x20 [ 2471.433976] alloc_inode+0x63/0x240 [ 2471.434800] new_inode+0x23/0x250 [ 2471.435602] proc_pid_make_inode+0x22/0x220 [ 2471.436573] proc_pident_instantiate+0x81/0x320 [ 2471.437628] proc_pident_lookup+0x1eb/0x270 [ 2471.438616] __lookup_slow+0x252/0x490 [ 2471.439509] ? lookup_open.isra.0+0x1270/0x1270 [ 2471.440580] ? selinux_inode_permission+0x401/0x640 [ 2471.441458] FAULT_INJECTION: forcing a failure. [ 2471.441458] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.441705] ? selinux_path_notify+0x4d0/0x4d0 [ 2471.444164] walk_component+0x41e/0x6a0 [ 2471.445059] ? handle_dots.part.0+0x15c0/0x15c0 [ 2471.446102] ? security_inode_permission+0xcb/0x100 [ 2471.447236] link_path_walk.part.0+0x699/0xbf0 [ 2471.448288] ? walk_component+0x6a0/0x6a0 [ 2471.449227] ? percpu_counter_add_batch+0x8b/0x140 [ 2471.450344] path_openat+0x25d/0x2770 [ 2471.451212] ? path_lookupat+0x860/0x860 [ 2471.452133] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2471.453314] ? lock_acquire+0x197/0x470 [ 2471.454201] ? find_held_lock+0x2c/0x110 [ 2471.455136] do_filp_open+0x190/0x3e0 [ 2471.456021] ? may_open_dev+0xf0/0xf0 [ 2471.456895] ? simple_attr_release+0x50/0x50 [ 2471.457889] ? _raw_spin_unlock+0x1a/0x30 [ 2471.458817] ? alloc_fd+0x2e7/0x670 [ 2471.459653] do_sys_openat2+0x171/0x4d0 [ 2471.460554] ? build_open_flags+0x6f0/0x6f0 [ 2471.461521] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2471.462605] ? wait_for_completion_io+0x270/0x270 [ 2471.463697] __x64_sys_openat+0x13f/0x1f0 [ 2471.464631] ? __ia32_sys_open+0x1c0/0x1c0 [ 2471.465581] ? ksys_write+0x1a9/0x260 [ 2471.466443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.467634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.468799] do_syscall_64+0x33/0x40 [ 2471.469637] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.470793] RIP: 0033:0x7f10a0111a04 [ 2471.471638] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2471.475788] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2471.477505] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2471.479107] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2471.480723] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2471.482351] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2471.483971] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2471.485608] CPU: 1 PID: 12739 Comm: syz-executor.0 Not tainted 5.10.239 #1 05:06:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x100000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:06:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1530, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:06:42 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 26) 05:06:42 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:06:42 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2471.486547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.487887] Call Trace: [ 2471.488261] dump_stack+0x107/0x167 [ 2471.488725] should_fail.cold+0x5/0xa [ 2471.489209] ? create_object.isra.0+0x3a/0xa20 [ 2471.489795] should_failslab+0x5/0x20 [ 2471.490281] kmem_cache_alloc+0x5b/0x310 [ 2471.490803] create_object.isra.0+0x3a/0xa20 [ 2471.491398] kmemleak_alloc_percpu+0xa0/0x100 [ 2471.491993] pcpu_alloc+0x4e2/0x1240 [ 2471.492472] __percpu_counter_init+0x10d/0x2d0 [ 2471.493060] io_uring_alloc_task_context+0xcc/0x6a0 [ 2471.493709] ? io_import_iovec+0x1120/0x1120 [ 2471.494271] io_uring_setup+0x1dd1/0x2980 [ 2471.494805] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2471.495453] ? wait_for_completion_io+0x270/0x270 [ 2471.496086] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.496742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.497391] do_syscall_64+0x33/0x40 [ 2471.497856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.498502] RIP: 0033:0x7f838ee79b19 [ 2471.498968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2471.501516] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2471.502483] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2471.503389] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2471.504293] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2471.505205] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2471.506148] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2471.531413] loop2: detected capacity change from 0 to 5120 [ 2471.538380] FAT-fs (loop2): bogus number of reserved sectors [ 2471.539132] FAT-fs (loop2): Can't find a valid FAT filesystem 05:06:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 14) 05:06:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x30) [ 2471.585679] FAULT_INJECTION: forcing a failure. [ 2471.585679] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.587093] CPU: 1 PID: 12756 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2471.587936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.588948] Call Trace: [ 2471.589278] dump_stack+0x107/0x167 [ 2471.589729] should_fail.cold+0x5/0xa [ 2471.590194] ? security_inode_alloc+0x34/0x160 [ 2471.590755] should_failslab+0x5/0x20 [ 2471.591220] kmem_cache_alloc+0x5b/0x310 [ 2471.591726] security_inode_alloc+0x34/0x160 [ 2471.592264] inode_init_always+0xa4e/0xd10 [ 2471.592781] ? proc_free_inode+0x20/0x20 [ 2471.593312] alloc_inode+0x84/0x240 [ 2471.593754] new_inode+0x23/0x250 [ 2471.594182] proc_pid_make_inode+0x22/0x220 [ 2471.594704] proc_pident_instantiate+0x81/0x320 [ 2471.595281] proc_pident_lookup+0x1eb/0x270 [ 2471.595821] __lookup_slow+0x252/0x490 [ 2471.596296] ? lookup_open.isra.0+0x1270/0x1270 [ 2471.596871] ? selinux_inode_permission+0x401/0x640 [ 2471.597477] ? selinux_path_notify+0x4d0/0x4d0 [ 2471.598032] walk_component+0x41e/0x6a0 [ 2471.598511] ? handle_dots.part.0+0x15c0/0x15c0 [ 2471.599084] ? security_inode_permission+0xcb/0x100 [ 2471.599704] link_path_walk.part.0+0x699/0xbf0 [ 2471.600275] ? walk_component+0x6a0/0x6a0 [ 2471.600785] ? percpu_counter_add_batch+0x8b/0x140 [ 2471.601390] path_openat+0x25d/0x2770 [ 2471.601873] ? path_lookupat+0x860/0x860 [ 2471.602375] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2471.603014] ? lock_acquire+0x197/0x470 [ 2471.603509] ? find_held_lock+0x2c/0x110 [ 2471.604003] do_filp_open+0x190/0x3e0 [ 2471.604461] ? may_open_dev+0xf0/0xf0 [ 2471.604926] ? simple_attr_release+0x50/0x50 [ 2471.605463] ? _raw_spin_unlock+0x1a/0x30 [ 2471.605963] ? alloc_fd+0x2e7/0x670 [ 2471.606415] do_sys_openat2+0x171/0x4d0 [ 2471.606953] ? build_open_flags+0x6f0/0x6f0 [ 2471.607559] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2471.608162] ? wait_for_completion_io+0x270/0x270 [ 2471.608756] __x64_sys_openat+0x13f/0x1f0 [ 2471.609261] ? __ia32_sys_open+0x1c0/0x1c0 [ 2471.609773] ? ksys_write+0x1a9/0x260 [ 2471.610238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.610873] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.611524] do_syscall_64+0x33/0x40 [ 2471.611976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.612590] RIP: 0033:0x7f10a0111a04 [ 2471.613044] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2471.615257] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2471.616206] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2471.617075] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2471.617949] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2471.618814] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2471.619687] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:06:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x200000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:06:42 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 7) 05:06:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x31) [ 2471.634007] loop2: detected capacity change from 0 to 5120 [ 2471.636884] FAT-fs (loop2): bogus number of reserved sectors [ 2471.637578] FAT-fs (loop2): Can't find a valid FAT filesystem 05:06:42 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2471.673196] FAULT_INJECTION: forcing a failure. [ 2471.673196] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.674831] CPU: 1 PID: 12765 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2471.675833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.677023] Call Trace: [ 2471.677402] dump_stack+0x107/0x167 [ 2471.677917] should_fail.cold+0x5/0xa [ 2471.678459] ? create_object.isra.0+0x3a/0xa20 [ 2471.679113] should_failslab+0x5/0x20 [ 2471.679692] kmem_cache_alloc+0x5b/0x310 [ 2471.680284] create_object.isra.0+0x3a/0xa20 [ 2471.680906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2471.681646] kmem_cache_alloc_trace+0x151/0x320 [ 2471.682316] io_uring_setup+0x40b/0x2980 [ 2471.682890] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2471.683537] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2471.684258] ? wait_for_completion_io+0x270/0x270 [ 2471.684837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.685451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.686053] do_syscall_64+0x33/0x40 [ 2471.686486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.687079] RIP: 0033:0x7f9c3da0ab19 [ 2471.687505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2471.689655] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2471.690500] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2471.691285] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2471.692116] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2471.692903] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2471.693712] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:06:42 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 27) 05:06:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1730, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:06:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 15) [ 2471.750488] FAULT_INJECTION: forcing a failure. [ 2471.750488] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.751886] CPU: 1 PID: 12772 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2471.752678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.753631] Call Trace: [ 2471.753937] dump_stack+0x107/0x167 [ 2471.754369] should_fail.cold+0x5/0xa [ 2471.754808] ? create_object.isra.0+0x3a/0xa20 [ 2471.755341] should_failslab+0x5/0x20 [ 2471.755775] kmem_cache_alloc+0x5b/0x310 [ 2471.756241] create_object.isra.0+0x3a/0xa20 [ 2471.756741] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2471.757293] kmem_cache_alloc+0x159/0x310 [ 2471.757769] security_inode_alloc+0x34/0x160 [ 2471.758247] inode_init_always+0xa4e/0xd10 [ 2471.758730] ? proc_free_inode+0x20/0x20 [ 2471.759169] alloc_inode+0x84/0x240 [ 2471.759591] new_inode+0x23/0x250 [ 2471.759967] proc_pid_make_inode+0x22/0x220 [ 2471.760464] proc_pident_instantiate+0x81/0x320 [ 2471.760996] proc_pident_lookup+0x1eb/0x270 [ 2471.761490] __lookup_slow+0x252/0x490 [ 2471.761936] ? lookup_open.isra.0+0x1270/0x1270 [ 2471.762478] ? selinux_inode_permission+0x401/0x640 [ 2471.763019] ? selinux_path_notify+0x4d0/0x4d0 [ 2471.763559] walk_component+0x41e/0x6a0 [ 2471.763990] ? handle_dots.part.0+0x15c0/0x15c0 [ 2471.764524] ? security_inode_permission+0xcb/0x100 [ 2471.765068] link_path_walk.part.0+0x699/0xbf0 [ 2471.765597] ? walk_component+0x6a0/0x6a0 [ 2471.766046] ? percpu_counter_add_batch+0x8b/0x140 [ 2471.766610] path_openat+0x25d/0x2770 [ 2471.767030] ? path_lookupat+0x860/0x860 [ 2471.767508] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2471.768086] ? lock_acquire+0x197/0x470 [ 2471.768542] ? find_held_lock+0x2c/0x110 [ 2471.768988] do_filp_open+0x190/0x3e0 [ 2471.769430] ? may_open_dev+0xf0/0xf0 [ 2471.769872] ? simple_attr_release+0x50/0x50 [ 2471.770383] ? _raw_spin_unlock+0x1a/0x30 [ 2471.770854] ? alloc_fd+0x2e7/0x670 [ 2471.771257] do_sys_openat2+0x171/0x4d0 [ 2471.771720] ? build_open_flags+0x6f0/0x6f0 [ 2471.772188] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2471.772743] ? wait_for_completion_io+0x270/0x270 [ 2471.773296] __x64_sys_openat+0x13f/0x1f0 [ 2471.773771] ? __ia32_sys_open+0x1c0/0x1c0 [ 2471.774253] ? ksys_write+0x1a9/0x260 [ 2471.774689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.775292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.775853] do_syscall_64+0x33/0x40 [ 2471.776280] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.776832] RIP: 0033:0x7f10a0111a04 [ 2471.777233] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2471.779206] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2471.780029] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2471.780794] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2471.781561] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2471.782326] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2471.783089] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:06:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x300000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:06:42 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2471.810301] FAULT_INJECTION: forcing a failure. [ 2471.810301] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.813368] CPU: 0 PID: 12779 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2471.814947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.816846] Call Trace: [ 2471.817453] dump_stack+0x107/0x167 [ 2471.818285] should_fail.cold+0x5/0xa [ 2471.819162] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2471.820362] should_failslab+0x5/0x20 [ 2471.821224] kmem_cache_alloc_trace+0x55/0x320 [ 2471.822271] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2471.823427] ? io_import_iovec+0x1120/0x1120 [ 2471.824438] io_uring_setup+0x1dd1/0x2980 [ 2471.825391] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2471.826552] ? wait_for_completion_io+0x270/0x270 [ 2471.827681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.828881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.830052] do_syscall_64+0x33/0x40 [ 2471.830894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.832063] RIP: 0033:0x7f838ee79b19 [ 2471.832908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2471.837081] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2471.838804] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2471.840432] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2471.842041] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2471.843673] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2471.845286] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2471.854670] loop2: detected capacity change from 0 to 5632 05:06:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x400000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:06:42 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 8) 05:06:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 16) 05:06:42 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2471.937035] FAT-fs (loop2): bogus number of reserved sectors [ 2471.938431] FAT-fs (loop2): Can't find a valid FAT filesystem 05:06:42 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2471.962753] FAULT_INJECTION: forcing a failure. [ 2471.962753] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.965714] CPU: 0 PID: 12796 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2471.967287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.969187] Call Trace: [ 2471.969791] dump_stack+0x107/0x167 [ 2471.970621] should_fail.cold+0x5/0xa [ 2471.971493] ? __d_alloc+0x2a/0x990 [ 2471.972320] should_failslab+0x5/0x20 [ 2471.973183] kmem_cache_alloc+0x5b/0x310 [ 2471.974106] __d_alloc+0x2a/0x990 [ 2471.974900] d_alloc_parallel+0x111/0x1bc0 [ 2471.975868] ? __d_lookup+0x396/0x760 [ 2471.976730] ? lock_downgrade+0x6d0/0x6d0 [ 2471.977670] ? find_held_lock+0x2c/0x110 [ 2471.978597] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2471.979547] ? __d_lookup+0x3bf/0x760 [ 2471.980421] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.981612] lookup_open.isra.0+0x962/0x1270 [ 2471.982623] ? vfs_tmpfile+0x350/0x350 [ 2471.983535] ? __mnt_want_write+0x196/0x280 [ 2471.984518] path_openat+0x972/0x2770 [ 2471.985386] ? path_lookupat+0x860/0x860 [ 2471.986310] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2471.987501] ? lock_acquire+0x197/0x470 [ 2471.988399] ? find_held_lock+0x2c/0x110 [ 2471.989337] do_filp_open+0x190/0x3e0 [ 2471.990196] ? may_open_dev+0xf0/0xf0 [ 2471.991065] ? simple_attr_release+0x50/0x50 [ 2471.992073] ? _raw_spin_unlock+0x1a/0x30 [ 2471.993005] ? alloc_fd+0x2e7/0x670 [ 2471.993840] do_sys_openat2+0x171/0x4d0 [ 2471.994752] ? build_open_flags+0x6f0/0x6f0 [ 2471.995727] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2471.996826] ? wait_for_completion_io+0x270/0x270 [ 2471.997918] __x64_sys_openat+0x13f/0x1f0 [ 2471.998854] ? __ia32_sys_open+0x1c0/0x1c0 [ 2471.999811] ? ksys_write+0x1a9/0x260 [ 2472.000678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2472.001858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2472.003022] do_syscall_64+0x33/0x40 [ 2472.003874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2472.005030] RIP: 0033:0x7f10a0111a04 [ 2472.005866] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2472.010027] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2472.011750] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2472.013360] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2472.014968] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2472.016591] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2472.018198] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2472.037969] FAULT_INJECTION: forcing a failure. [ 2472.037969] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.039340] CPU: 1 PID: 12800 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2472.040145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2472.041097] Call Trace: [ 2472.041406] dump_stack+0x107/0x167 [ 2472.041826] should_fail.cold+0x5/0xa [ 2472.042268] ? create_object.isra.0+0x3a/0xa20 [ 2472.042796] should_failslab+0x5/0x20 [ 2472.043239] kmem_cache_alloc+0x5b/0x310 [ 2472.043715] create_object.isra.0+0x3a/0xa20 [ 2472.044225] kmemleak_alloc_percpu+0xa0/0x100 [ 2472.044741] pcpu_alloc+0x4e2/0x1240 [ 2472.045178] ? io_tctx_exit_cb+0xf0/0xf0 [ 2472.045648] percpu_ref_init+0x31/0x3d0 [ 2472.046106] io_uring_setup+0x47a/0x2980 [ 2472.046573] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2472.047130] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2472.047715] ? wait_for_completion_io+0x270/0x270 [ 2472.048290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2472.048894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2472.049487] do_syscall_64+0x33/0x40 [ 2472.049914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2472.050504] RIP: 0033:0x7f9c3da0ab19 [ 2472.050931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2472.053055] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2472.053932] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2472.054750] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2472.055579] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2472.056397] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2472.057218] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2472.067808] loop2: detected capacity change from 0 to 5632 [ 2472.086928] FAT-fs (loop2): bogus number of reserved sectors [ 2472.088395] FAT-fs (loop2): Can't find a valid FAT filesystem 05:06:59 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 28) 05:06:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x300) 05:06:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1d24, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:06:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 17) 05:06:59 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:06:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x800000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:06:59 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 9) 05:06:59 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2488.289519] FAULT_INJECTION: forcing a failure. [ 2488.289519] name failslab, interval 1, probability 0, space 0, times 0 [ 2488.292203] CPU: 0 PID: 12816 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2488.293784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2488.295684] Call Trace: [ 2488.296299] dump_stack+0x107/0x167 [ 2488.297137] should_fail.cold+0x5/0xa [ 2488.298006] ? create_object.isra.0+0x3a/0xa20 [ 2488.299041] should_failslab+0x5/0x20 [ 2488.299917] kmem_cache_alloc+0x5b/0x310 [ 2488.300840] create_object.isra.0+0x3a/0xa20 [ 2488.301839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2488.302991] kmem_cache_alloc+0x159/0x310 [ 2488.303953] __d_alloc+0x2a/0x990 [ 2488.304739] d_alloc_parallel+0x111/0x1bc0 [ 2488.305700] ? __d_lookup+0x396/0x760 [ 2488.306569] ? lock_downgrade+0x6d0/0x6d0 [ 2488.307522] ? find_held_lock+0x2c/0x110 [ 2488.308454] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2488.309398] ? __d_lookup+0x3bf/0x760 [ 2488.310264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2488.311457] lookup_open.isra.0+0x962/0x1270 [ 2488.312483] ? vfs_tmpfile+0x350/0x350 [ 2488.313392] ? __mnt_want_write+0x196/0x280 [ 2488.313798] FAULT_INJECTION: forcing a failure. [ 2488.313798] name failslab, interval 1, probability 0, space 0, times 0 [ 2488.314387] path_openat+0x972/0x2770 [ 2488.318123] ? path_lookupat+0x860/0x860 [ 2488.319044] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2488.320233] ? lock_acquire+0x197/0x470 [ 2488.321131] ? find_held_lock+0x2c/0x110 [ 2488.322062] do_filp_open+0x190/0x3e0 [ 2488.322925] ? may_open_dev+0xf0/0xf0 [ 2488.323808] ? simple_attr_release+0x50/0x50 [ 2488.324814] ? _raw_spin_unlock+0x1a/0x30 [ 2488.325745] ? alloc_fd+0x2e7/0x670 [ 2488.326576] do_sys_openat2+0x171/0x4d0 [ 2488.327483] ? build_open_flags+0x6f0/0x6f0 [ 2488.328456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2488.329549] ? wait_for_completion_io+0x270/0x270 [ 2488.330663] __x64_sys_openat+0x13f/0x1f0 [ 2488.331622] ? __ia32_sys_open+0x1c0/0x1c0 [ 2488.332581] ? ksys_write+0x1a9/0x260 [ 2488.333449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2488.334644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2488.335829] do_syscall_64+0x33/0x40 [ 2488.336679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2488.337846] RIP: 0033:0x7f10a0111a04 [ 2488.338692] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2488.342894] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2488.344625] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2488.346237] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2488.347859] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2488.349476] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2488.351093] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2488.352740] CPU: 1 PID: 12823 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2488.354210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2488.356001] Call Trace: [ 2488.356565] dump_stack+0x107/0x167 [ 2488.357334] should_fail.cold+0x5/0xa [ 2488.358147] ? create_object.isra.0+0x3a/0xa20 [ 2488.359116] should_failslab+0x5/0x20 [ 2488.359934] kmem_cache_alloc+0x5b/0x310 [ 2488.360802] create_object.isra.0+0x3a/0xa20 [ 2488.361743] kmemleak_alloc_percpu+0xa0/0x100 [ 2488.362704] pcpu_alloc+0x4e2/0x1240 [ 2488.363529] ? io_tctx_exit_cb+0xf0/0xf0 [ 2488.364389] percpu_ref_init+0x31/0x3d0 [ 2488.365232] io_uring_setup+0x47a/0x2980 [ 2488.366094] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2488.367127] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2488.368212] ? wait_for_completion_io+0x270/0x270 [ 2488.369257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2488.370373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2488.371479] do_syscall_64+0x33/0x40 [ 2488.372268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2488.373351] RIP: 0033:0x7f9c3da0ab19 [ 2488.374136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2488.378048] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2488.379669] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2488.381179] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2488.382687] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2488.384211] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2488.385723] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2488.407620] loop2: detected capacity change from 0 to 7168 [ 2488.412992] FAULT_INJECTION: forcing a failure. [ 2488.412992] name failslab, interval 1, probability 0, space 0, times 0 [ 2488.415489] CPU: 1 PID: 12830 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2488.416947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2488.418688] Call Trace: [ 2488.419250] dump_stack+0x107/0x167 [ 2488.420030] should_fail.cold+0x5/0xa [ 2488.420838] ? create_object.isra.0+0x3a/0xa20 [ 2488.421808] should_failslab+0x5/0x20 [ 2488.422615] kmem_cache_alloc+0x5b/0x310 [ 2488.423491] create_object.isra.0+0x3a/0xa20 [ 2488.424421] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2488.425501] kmem_cache_alloc_trace+0x151/0x320 [ 2488.426484] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2488.427563] ? io_import_iovec+0x1120/0x1120 [ 2488.428515] io_uring_setup+0x1dd1/0x2980 [ 2488.429403] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2488.430471] ? wait_for_completion_io+0x270/0x270 [ 2488.431517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2488.432625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2488.433715] do_syscall_64+0x33/0x40 [ 2488.434502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2488.435596] RIP: 0033:0x7f838ee79b19 [ 2488.436391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2488.440291] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2488.441899] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2488.443418] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2488.444926] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2488.446417] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2488.447949] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:06:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x900000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2488.484116] FAT-fs (loop2): bogus number of reserved sectors [ 2488.485702] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2488.531370] loop2: detected capacity change from 0 to 7168 [ 2488.544470] FAT-fs (loop2): bogus number of reserved sectors [ 2488.545850] FAT-fs (loop2): Can't find a valid FAT filesystem 05:07:15 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:07:15 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r4, r5+10000000}}, &(0x7f0000000140)) 05:07:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x5c8) 05:07:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1d25, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2504.815000] FAULT_INJECTION: forcing a failure. [ 2504.815000] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.817565] CPU: 0 PID: 12859 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2504.817953] loop2: detected capacity change from 0 to 7168 [ 2504.819142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2504.819151] Call Trace: [ 2504.819174] dump_stack+0x107/0x167 [ 2504.819199] should_fail.cold+0x5/0xa [ 2504.824560] ? percpu_ref_init+0xd8/0x3d0 [ 2504.825503] should_failslab+0x5/0x20 [ 2504.826369] kmem_cache_alloc_trace+0x55/0x320 [ 2504.827411] ? io_tctx_exit_cb+0xf0/0xf0 [ 2504.828331] percpu_ref_init+0xd8/0x3d0 [ 2504.829238] io_uring_setup+0x47a/0x2980 [ 2504.830163] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2504.831269] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2504.832430] ? wait_for_completion_io+0x270/0x270 [ 2504.832761] FAT-fs (loop2): bogus number of reserved sectors [ 2504.833551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2504.833579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2504.834855] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2504.835970] do_syscall_64+0x33/0x40 [ 2504.835999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2504.840378] RIP: 0033:0x7f9c3da0ab19 [ 2504.841228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2504.845396] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2504.847121] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2504.848748] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2504.850371] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2504.852011] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2504.853634] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2504.864583] FAULT_INJECTION: forcing a failure. [ 2504.864583] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.867230] CPU: 0 PID: 12855 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2504.868810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2504.870696] Call Trace: [ 2504.871290] dump_stack+0x107/0x167 [ 2504.871447] loop2: detected capacity change from 0 to 7168 [ 2504.872123] should_fail.cold+0x5/0xa [ 2504.872144] ? io_wq_create+0xeb/0xc00 [ 2504.872165] should_failslab+0x5/0x20 [ 2504.872189] __kmalloc+0x72/0x390 [ 2504.876690] io_wq_create+0xeb/0xc00 [ 2504.877010] FAT-fs (loop2): bogus number of reserved sectors [ 2504.877534] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2504.878821] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2504.879879] ? io_import_iovec+0x1120/0x1120 [ 2504.879905] ? io_apoll_task_func+0x2d0/0x2d0 [ 2504.883084] ? __io_req_find_next+0x300/0x300 [ 2504.884123] io_uring_setup+0x1dd1/0x2980 [ 2504.885068] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2504.886210] ? wait_for_completion_io+0x270/0x270 [ 2504.887325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2504.888519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2504.889684] do_syscall_64+0x33/0x40 [ 2504.890523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2504.891698] RIP: 0033:0x7f838ee79b19 05:07:15 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 29) 05:07:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xe00000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:07:15 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 10) 05:07:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 18) [ 2504.892542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2504.896951] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2504.898719] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2504.900390] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2504.902051] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2504.903722] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2504.905382] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2504.915269] FAULT_INJECTION: forcing a failure. [ 2504.915269] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.918003] CPU: 0 PID: 12865 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2504.919616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2504.921560] Call Trace: [ 2504.922176] dump_stack+0x107/0x167 [ 2504.923023] should_fail.cold+0x5/0xa [ 2504.923921] ? proc_alloc_inode+0x18/0x200 [ 2504.924907] should_failslab+0x5/0x20 [ 2504.925790] kmem_cache_alloc+0x5b/0x310 [ 2504.926735] ? proc_free_inode+0x20/0x20 [ 2504.927686] proc_alloc_inode+0x18/0x200 [ 2504.928624] ? proc_free_inode+0x20/0x20 [ 2504.929569] alloc_inode+0x63/0x240 [ 2504.930412] new_inode+0x23/0x250 [ 2504.931222] proc_get_inode+0x1e/0x7e0 [ 2504.932135] proc_lookup_de+0x13a/0x220 [ 2504.933059] proc_tgid_net_lookup+0x70/0x100 [ 2504.934082] lookup_open.isra.0+0x79f/0x1270 [ 2504.935105] ? vfs_tmpfile+0x350/0x350 [ 2504.936038] ? __mnt_want_write+0x196/0x280 [ 2504.937049] path_openat+0x972/0x2770 [ 2504.937941] ? path_lookupat+0x860/0x860 [ 2504.938884] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2504.940110] ? lock_acquire+0x197/0x470 [ 2504.941033] ? find_held_lock+0x2c/0x110 [ 2504.941986] do_filp_open+0x190/0x3e0 [ 2504.942865] ? may_open_dev+0xf0/0xf0 [ 2504.943768] ? simple_attr_release+0x50/0x50 [ 2504.944792] ? alloc_fd+0x183/0x670 [ 2504.945641] ? _raw_spin_unlock+0x1a/0x30 [ 2504.946598] ? alloc_fd+0x2e7/0x670 [ 2504.947455] do_sys_openat2+0x171/0x4d0 [ 2504.948385] ? build_open_flags+0x6f0/0x6f0 [ 2504.949379] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2504.950500] ? wait_for_completion_io+0x270/0x270 [ 2504.951636] __x64_sys_openat+0x13f/0x1f0 [ 2504.952604] ? __ia32_sys_open+0x1c0/0x1c0 [ 2504.953580] ? ksys_write+0x1a9/0x260 [ 2504.954476] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2504.955700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2504.956897] do_syscall_64+0x33/0x40 [ 2504.957762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2504.958950] RIP: 0033:0x7f10a0111a04 [ 2504.959822] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2504.964104] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2504.965835] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2504.967463] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2504.969092] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2504.970704] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2504.972333] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:07:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:07:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x1100000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:07:16 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 11) [ 2505.047742] loop2: detected capacity change from 0 to 8192 [ 2505.063191] FAT-fs (loop2): bogus number of reserved sectors [ 2505.064736] FAT-fs (loop2): Can't find a valid FAT filesystem 05:07:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 19) 05:07:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x3000000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:07:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2010, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:07:16 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 30) [ 2505.145538] FAULT_INJECTION: forcing a failure. [ 2505.145538] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.148114] CPU: 0 PID: 12877 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2505.149683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2505.151574] Call Trace: [ 2505.152184] dump_stack+0x107/0x167 [ 2505.152575] FAULT_INJECTION: forcing a failure. [ 2505.152575] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.153015] should_fail.cold+0x5/0xa [ 2505.153037] ? create_object.isra.0+0x3a/0xa20 [ 2505.153064] should_failslab+0x5/0x20 [ 2505.158108] kmem_cache_alloc+0x5b/0x310 [ 2505.159035] create_object.isra.0+0x3a/0xa20 [ 2505.160039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2505.161191] kmem_cache_alloc+0x159/0x310 [ 2505.162133] ? proc_free_inode+0x20/0x20 [ 2505.163049] proc_alloc_inode+0x18/0x200 [ 2505.163969] ? proc_free_inode+0x20/0x20 [ 2505.164877] alloc_inode+0x63/0x240 [ 2505.165698] new_inode+0x23/0x250 [ 2505.166481] proc_get_inode+0x1e/0x7e0 [ 2505.167366] proc_lookup_de+0x13a/0x220 [ 2505.168273] proc_tgid_net_lookup+0x70/0x100 [ 2505.169262] lookup_open.isra.0+0x79f/0x1270 [ 2505.170265] ? vfs_tmpfile+0x350/0x350 [ 2505.171159] ? __mnt_want_write+0x196/0x280 [ 2505.172149] path_openat+0x972/0x2770 [ 2505.173020] ? path_lookupat+0x860/0x860 [ 2505.173933] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2505.175111] ? lock_acquire+0x197/0x470 [ 2505.176015] ? find_held_lock+0x2c/0x110 [ 2505.176938] do_filp_open+0x190/0x3e0 [ 2505.177790] ? may_open_dev+0xf0/0xf0 [ 2505.178668] ? simple_attr_release+0x50/0x50 [ 2505.179687] ? _raw_spin_unlock+0x1a/0x30 [ 2505.180620] ? alloc_fd+0x2e7/0x670 [ 2505.181455] do_sys_openat2+0x171/0x4d0 [ 2505.182361] ? build_open_flags+0x6f0/0x6f0 [ 2505.183331] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2505.184424] ? wait_for_completion_io+0x270/0x270 [ 2505.185509] __x64_sys_openat+0x13f/0x1f0 [ 2505.186441] ? __ia32_sys_open+0x1c0/0x1c0 [ 2505.187395] ? ksys_write+0x1a9/0x260 [ 2505.188268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2505.189456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2505.190613] do_syscall_64+0x33/0x40 [ 2505.191451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2505.192619] RIP: 0033:0x7f10a0111a04 [ 2505.193453] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2505.197638] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2505.199359] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2505.200977] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2505.202588] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2505.204215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2505.205818] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2505.207455] CPU: 1 PID: 12879 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2505.208958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2505.210739] Call Trace: [ 2505.211311] dump_stack+0x107/0x167 [ 2505.212111] should_fail.cold+0x5/0xa [ 2505.212926] ? create_object.isra.0+0x3a/0xa20 [ 2505.213899] should_failslab+0x5/0x20 [ 2505.214712] kmem_cache_alloc+0x5b/0x310 [ 2505.215584] create_object.isra.0+0x3a/0xa20 [ 2505.216528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2505.217614] kmem_cache_alloc_trace+0x151/0x320 [ 2505.218604] ? io_tctx_exit_cb+0xf0/0xf0 [ 2505.219470] percpu_ref_init+0xd8/0x3d0 [ 2505.220343] io_uring_setup+0x47a/0x2980 [ 2505.221210] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2505.222237] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2505.223314] ? wait_for_completion_io+0x270/0x270 [ 2505.224378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2505.225497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2505.226599] do_syscall_64+0x33/0x40 [ 2505.227395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2505.228492] RIP: 0033:0x7f9c3da0ab19 [ 2505.229283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2505.233205] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2505.234823] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2505.236346] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2505.237853] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2505.239372] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2505.240889] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:07:16 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2505.328459] FAULT_INJECTION: forcing a failure. [ 2505.328459] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.331425] CPU: 1 PID: 12885 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2505.332895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2505.334632] Call Trace: [ 2505.335194] dump_stack+0x107/0x167 [ 2505.335978] should_fail.cold+0x5/0xa [ 2505.336780] ? create_object.isra.0+0x3a/0xa20 [ 2505.337740] should_failslab+0x5/0x20 [ 2505.338542] kmem_cache_alloc+0x5b/0x310 [ 2505.339410] create_object.isra.0+0x3a/0xa20 [ 2505.340356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2505.341430] __kmalloc+0x16e/0x390 [ 2505.342184] io_wq_create+0xeb/0xc00 [ 2505.342983] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2505.344069] ? io_import_iovec+0x1120/0x1120 [ 2505.345002] ? io_apoll_task_func+0x2d0/0x2d0 [ 2505.345939] ? __io_req_find_next+0x300/0x300 [ 2505.346892] io_uring_setup+0x1dd1/0x2980 [ 2505.347772] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2505.348820] ? wait_for_completion_io+0x270/0x270 [ 2505.349860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2505.350962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2505.352055] do_syscall_64+0x33/0x40 [ 2505.352828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2505.353901] RIP: 0033:0x7f838ee79b19 [ 2505.354683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2505.358569] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2505.360152] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2505.361627] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2505.363110] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2505.364629] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2505.366146] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:07:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 20) 05:07:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x900) 05:07:33 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 12) 05:07:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r4, r5+10000000}}, &(0x7f0000000140)) 05:07:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x241d, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:07:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x3100000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2522.180456] FAULT_INJECTION: forcing a failure. [ 2522.180456] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.182924] CPU: 1 PID: 12904 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2522.184398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2522.186147] Call Trace: [ 2522.186706] dump_stack+0x107/0x167 [ 2522.187485] should_fail.cold+0x5/0xa [ 2522.188306] ? io_wq_create+0x6ef/0xc00 [ 2522.189142] should_failslab+0x5/0x20 05:07:33 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 31) 05:07:33 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2522.189941] kmem_cache_alloc_node_trace+0x59/0x340 [ 2522.191284] io_wq_create+0x6ef/0xc00 [ 2522.192122] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2522.193207] ? io_import_iovec+0x1120/0x1120 [ 2522.194143] ? io_apoll_task_func+0x2d0/0x2d0 [ 2522.195082] ? __io_req_find_next+0x300/0x300 [ 2522.196045] io_uring_setup+0x1dd1/0x2980 [ 2522.196930] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2522.198000] ? wait_for_completion_io+0x270/0x270 [ 2522.199042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2522.200170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2522.201261] do_syscall_64+0x33/0x40 [ 2522.202050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2522.203132] RIP: 0033:0x7f838ee79b19 [ 2522.203934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2522.205226] FAULT_INJECTION: forcing a failure. [ 2522.205226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2522.207840] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2522.207862] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2522.207885] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2522.216116] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2522.217622] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2522.219121] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2522.220661] CPU: 0 PID: 12907 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2522.222528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2522.224751] Call Trace: [ 2522.225460] dump_stack+0x107/0x167 [ 2522.226441] should_fail.cold+0x5/0xa [ 2522.227464] __alloc_pages_nodemask+0x182/0x600 [ 2522.228714] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2522.230317] ? cap_capable+0x1cd/0x230 [ 2522.231363] alloc_pages_current+0x187/0x280 [ 2522.232546] __get_free_pages+0xc/0xa0 [ 2522.233582] io_uring_setup+0xe27/0x2980 [ 2522.234677] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2522.236035] ? wait_for_completion_io+0x270/0x270 [ 2522.237349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2522.238753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2522.240143] do_syscall_64+0x33/0x40 [ 2522.241134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2522.242488] RIP: 0033:0x7f9c3da0ab19 [ 2522.243470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2522.248369] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2522.250410] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2522.252303] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2522.254191] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2522.256101] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2522.257978] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2522.308493] loop2: detected capacity change from 0 to 9216 [ 2522.315181] FAULT_INJECTION: forcing a failure. [ 2522.315181] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.318082] CPU: 0 PID: 12919 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2522.319855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2522.321981] Call Trace: [ 2522.322656] dump_stack+0x107/0x167 [ 2522.323587] should_fail.cold+0x5/0xa [ 2522.324563] ? security_inode_alloc+0x34/0x160 [ 2522.325729] should_failslab+0x5/0x20 [ 2522.326699] kmem_cache_alloc+0x5b/0x310 [ 2522.327739] security_inode_alloc+0x34/0x160 [ 2522.328867] inode_init_always+0xa4e/0xd10 [ 2522.329947] ? proc_free_inode+0x20/0x20 [ 2522.330980] alloc_inode+0x84/0x240 [ 2522.331920] new_inode+0x23/0x250 [ 2522.332811] proc_get_inode+0x1e/0x7e0 [ 2522.333803] proc_lookup_de+0x13a/0x220 [ 2522.334820] proc_tgid_net_lookup+0x70/0x100 [ 2522.335939] lookup_open.isra.0+0x79f/0x1270 [ 2522.337048] ? vfs_tmpfile+0x350/0x350 [ 2522.338064] ? __mnt_want_write+0x196/0x280 [ 2522.339160] path_openat+0x972/0x2770 [ 2522.340147] ? path_lookupat+0x860/0x860 [ 2522.341176] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2522.342497] ? lock_acquire+0x197/0x470 [ 2522.343498] ? find_held_lock+0x2c/0x110 [ 2522.344543] do_filp_open+0x190/0x3e0 [ 2522.345497] ? may_open_dev+0xf0/0xf0 [ 2522.346466] ? simple_attr_release+0x50/0x50 [ 2522.347582] ? _raw_spin_unlock+0x1a/0x30 [ 2522.348644] ? alloc_fd+0x2e7/0x670 [ 2522.349579] do_sys_openat2+0x171/0x4d0 [ 2522.350579] ? build_open_flags+0x6f0/0x6f0 [ 2522.351663] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2522.352894] ? wait_for_completion_io+0x270/0x270 [ 2522.354119] __x64_sys_openat+0x13f/0x1f0 [ 2522.355153] ? __ia32_sys_open+0x1c0/0x1c0 [ 2522.356209] ? ksys_write+0x1a9/0x260 [ 2522.357171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2522.358479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2522.359767] do_syscall_64+0x33/0x40 [ 2522.360701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2522.361983] RIP: 0033:0x7f10a0111a04 [ 2522.362920] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2522.367511] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2522.369426] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2522.371209] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2522.373006] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2522.374849] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2522.376698] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2522.383595] FAT-fs (loop2): bogus number of reserved sectors [ 2522.385108] FAT-fs (loop2): Can't find a valid FAT filesystem 05:07:33 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 32) 05:07:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x4000000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:07:33 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 13) [ 2522.484763] FAULT_INJECTION: forcing a failure. [ 2522.484763] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.487235] CPU: 1 PID: 12925 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2522.488726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2522.490488] Call Trace: [ 2522.491058] dump_stack+0x107/0x167 [ 2522.491852] should_fail.cold+0x5/0xa [ 2522.492670] ? create_object.isra.0+0x3a/0xa20 [ 2522.493651] should_failslab+0x5/0x20 [ 2522.494470] kmem_cache_alloc+0x5b/0x310 [ 2522.495342] ? io_wq_create+0x114/0xc00 [ 2522.496203] create_object.isra.0+0x3a/0xa20 [ 2522.497140] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2522.498232] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2522.499328] io_wq_create+0x6ef/0xc00 [ 2522.500165] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2522.501254] ? io_import_iovec+0x1120/0x1120 [ 2522.502202] ? io_apoll_task_func+0x2d0/0x2d0 [ 2522.503164] ? __io_req_find_next+0x300/0x300 [ 2522.504146] io_uring_setup+0x1dd1/0x2980 [ 2522.505040] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2522.506115] ? wait_for_completion_io+0x270/0x270 [ 2522.507162] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2522.508291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2522.509394] do_syscall_64+0x33/0x40 [ 2522.510189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2522.511279] RIP: 0033:0x7f838ee79b19 [ 2522.512086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2522.516006] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2522.517623] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2522.519138] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2522.520653] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2522.522159] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2522.523659] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:07:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r4, r5+10000000}}, &(0x7f0000000140)) 05:07:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 21) 05:07:33 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x140, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:07:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x251d, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2522.577580] FAULT_INJECTION: forcing a failure. [ 2522.577580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2522.580290] CPU: 0 PID: 12932 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2522.581861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2522.583757] Call Trace: [ 2522.584372] dump_stack+0x107/0x167 [ 2522.585205] should_fail.cold+0x5/0xa [ 2522.586077] __alloc_pages_nodemask+0x182/0x600 [ 2522.587141] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2522.588536] ? cap_capable+0x1cd/0x230 [ 2522.589430] alloc_pages_current+0x187/0x280 [ 2522.590446] __get_free_pages+0xc/0xa0 [ 2522.591327] io_uring_setup+0xf9a/0x2980 [ 2522.592329] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2522.593490] ? wait_for_completion_io+0x270/0x270 [ 2522.594618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2522.595838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2522.597044] do_syscall_64+0x33/0x40 [ 2522.597896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2522.599081] RIP: 0033:0x7f9c3da0ab19 [ 2522.599942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2522.604238] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2522.605977] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2522.607633] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2522.609305] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2522.611039] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2522.613073] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2522.644711] FAULT_INJECTION: forcing a failure. [ 2522.644711] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.647229] CPU: 1 PID: 12936 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2522.648706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2522.650456] Call Trace: [ 2522.651022] dump_stack+0x107/0x167 [ 2522.651812] should_fail.cold+0x5/0xa [ 2522.652631] ? create_object.isra.0+0x3a/0xa20 [ 2522.653600] should_failslab+0x5/0x20 [ 2522.654402] kmem_cache_alloc+0x5b/0x310 [ 2522.655264] create_object.isra.0+0x3a/0xa20 [ 2522.656195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2522.657269] kmem_cache_alloc+0x159/0x310 [ 2522.658155] security_inode_alloc+0x34/0x160 05:07:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xc805000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2522.659082] inode_init_always+0xa4e/0xd10 [ 2522.660181] ? proc_free_inode+0x20/0x20 [ 2522.661036] alloc_inode+0x84/0x240 [ 2522.661802] new_inode+0x23/0x250 [ 2522.662538] proc_get_inode+0x1e/0x7e0 [ 2522.663359] proc_lookup_de+0x13a/0x220 [ 2522.664220] proc_tgid_net_lookup+0x70/0x100 [ 2522.665156] lookup_open.isra.0+0x79f/0x1270 [ 2522.666087] ? vfs_tmpfile+0x350/0x350 [ 2522.666925] ? __mnt_want_write+0x196/0x280 [ 2522.667854] path_openat+0x972/0x2770 [ 2522.668665] ? path_lookupat+0x860/0x860 [ 2522.669519] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2522.670611] ? lock_acquire+0x197/0x470 [ 2522.671447] ? find_held_lock+0x2c/0x110 [ 2522.672334] do_filp_open+0x190/0x3e0 [ 2522.673140] ? may_open_dev+0xf0/0xf0 [ 2522.673962] ? simple_attr_release+0x50/0x50 [ 2522.674895] ? _raw_spin_unlock+0x1a/0x30 [ 2522.675763] ? alloc_fd+0x2e7/0x670 [ 2522.676560] do_sys_openat2+0x171/0x4d0 [ 2522.677410] ? build_open_flags+0x6f0/0x6f0 [ 2522.678322] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2522.679333] ? wait_for_completion_io+0x270/0x270 [ 2522.680359] __x64_sys_openat+0x13f/0x1f0 [ 2522.681234] ? __ia32_sys_open+0x1c0/0x1c0 [ 2522.682120] ? ksys_write+0x1a9/0x260 [ 2522.682924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2522.684040] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2522.685136] do_syscall_64+0x33/0x40 [ 2522.685915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2522.686993] RIP: 0033:0x7f10a0111a04 [ 2522.687779] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2522.691650] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2522.693246] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2522.694750] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2522.696251] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2522.697748] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2522.699242] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:07:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xe00) 05:07:47 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x140, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2536.187196] FAULT_INJECTION: forcing a failure. [ 2536.187196] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.189906] CPU: 0 PID: 12956 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2536.191479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.193361] Call Trace: [ 2536.193955] dump_stack+0x107/0x167 [ 2536.194783] should_fail.cold+0x5/0xa [ 2536.195650] ? io_uring_setup+0x17ed/0x2980 [ 2536.196636] should_failslab+0x5/0x20 [ 2536.197494] kmem_cache_alloc_trace+0x55/0x320 [ 2536.198526] ? alloc_pages_current+0x18f/0x280 [ 2536.199553] io_uring_setup+0x17ed/0x2980 [ 2536.200511] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2536.201669] ? wait_for_completion_io+0x270/0x270 [ 2536.202780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.203981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.205140] do_syscall_64+0x33/0x40 [ 2536.205980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.207128] RIP: 0033:0x7f9c3da0ab19 [ 2536.207981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.212164] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2536.213872] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2536.215489] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2536.217110] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2536.218724] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2536.220364] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2536.231175] FAULT_INJECTION: forcing a failure. [ 2536.231175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2536.233978] CPU: 0 PID: 12958 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2536.235551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.237440] Call Trace: [ 2536.238037] dump_stack+0x107/0x167 [ 2536.238869] should_fail.cold+0x5/0xa [ 2536.239733] __alloc_pages_nodemask+0x182/0x600 [ 2536.240791] ? lock_acquire+0x197/0x470 [ 2536.241692] ? lockref_get+0x11/0x50 [ 2536.242532] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2536.243899] ? lock_downgrade+0x6d0/0x6d0 [ 2536.244844] ? do_raw_spin_lock+0x121/0x260 [ 2536.245828] ? rwlock_bug.part.0+0x90/0x90 [ 2536.246792] alloc_pages_current+0x187/0x280 [ 2536.247800] __get_free_pages+0xc/0xa0 [ 2536.248689] inode_doinit_with_dentry+0x8f1/0x1240 [ 2536.249811] ? __mod_timer+0xc87/0xd10 [ 2536.250694] ? trace_seq_path+0x140/0x2f0 [ 2536.251639] ? selinux_file_lock+0x280/0x280 [ 2536.252645] ? current_time+0x1e6/0x2c0 [ 2536.253550] selinux_d_instantiate+0x23/0x30 [ 2536.254556] security_d_instantiate+0x56/0xe0 [ 2536.255574] d_splice_alias+0x8c/0xc60 [ 2536.256466] proc_lookup_de+0x17d/0x220 [ 2536.257383] proc_tgid_net_lookup+0x70/0x100 [ 2536.258376] lookup_open.isra.0+0x79f/0x1270 [ 2536.259379] ? vfs_tmpfile+0x350/0x350 [ 2536.260290] ? __mnt_want_write+0x196/0x280 [ 2536.261270] path_openat+0x972/0x2770 [ 2536.262149] ? path_lookupat+0x860/0x860 [ 2536.263066] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2536.264276] ? lock_acquire+0x197/0x470 [ 2536.265169] ? find_held_lock+0x2c/0x110 [ 2536.266102] do_filp_open+0x190/0x3e0 [ 2536.266962] ? may_open_dev+0xf0/0xf0 [ 2536.267842] ? simple_attr_release+0x50/0x50 [ 2536.268860] ? _raw_spin_unlock+0x1a/0x30 [ 2536.269800] ? alloc_fd+0x2e7/0x670 [ 2536.270637] do_sys_openat2+0x171/0x4d0 [ 2536.271537] ? build_open_flags+0x6f0/0x6f0 [ 2536.272519] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2536.273608] ? wait_for_completion_io+0x270/0x270 [ 2536.274703] __x64_sys_openat+0x13f/0x1f0 [ 2536.275636] ? __ia32_sys_open+0x1c0/0x1c0 [ 2536.276599] ? ksys_write+0x1a9/0x260 [ 2536.277469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.278646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.279810] do_syscall_64+0x33/0x40 [ 2536.280653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.281817] RIP: 0033:0x7f10a0111a04 [ 2536.282676] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2536.286871] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2536.288606] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2536.290217] RDX: 0000000000000002 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2536.291830] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2536.293493] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2536.295145] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2536.326088] FAULT_INJECTION: forcing a failure. [ 2536.326088] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.327503] CPU: 1 PID: 12969 Comm: syz-executor.0 Not tainted 5.10.239 #1 05:07:47 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 14) 05:07:47 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 33) 05:07:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xeffdffff00000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:07:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2e00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:07:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 22) 05:07:47 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, 0x0, &(0x7f0000000140)) 05:07:47 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, 0x0, &(0x7f0000000140)) [ 2536.328343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.329754] Call Trace: [ 2536.330079] dump_stack+0x107/0x167 [ 2536.330521] should_fail.cold+0x5/0xa [ 2536.330977] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2536.331639] should_failslab+0x5/0x20 [ 2536.332107] kmem_cache_alloc_trace+0x55/0x320 [ 2536.332652] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2536.333296] io_uring_setup+0x14f6/0x2980 [ 2536.333780] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2536.334372] ? wait_for_completion_io+0x270/0x270 [ 2536.334961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.335590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.336212] do_syscall_64+0x33/0x40 [ 2536.336653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.337264] RIP: 0033:0x7f838ee79b19 [ 2536.337708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.339882] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2536.340789] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2536.341627] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2536.342464] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2536.343301] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2536.344163] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2536.354828] loop2: detected capacity change from 0 to 11776 [ 2536.373706] FAT-fs (loop2): bogus number of reserved sectors [ 2536.375360] FAT-fs (loop2): Can't find a valid FAT filesystem 05:07:47 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x140, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:07:47 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 15) 05:07:47 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 34) [ 2536.462167] loop2: detected capacity change from 0 to 11776 [ 2536.476947] FAT-fs (loop2): bogus number of reserved sectors [ 2536.478695] FAT-fs (loop2): Can't find a valid FAT filesystem 05:07:47 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, 0x0, &(0x7f0000000140)) 05:07:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xf7ffff7f00000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2536.507803] FAULT_INJECTION: forcing a failure. [ 2536.507803] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.509231] CPU: 1 PID: 12981 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2536.510049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.511015] Call Trace: [ 2536.511327] dump_stack+0x107/0x167 [ 2536.511749] should_fail.cold+0x5/0xa [ 2536.512202] ? io_uring_setup+0x17ed/0x2980 [ 2536.512732] should_failslab+0x5/0x20 [ 2536.513339] kmem_cache_alloc_trace+0x55/0x320 [ 2536.513876] ? alloc_pages_current+0x18f/0x280 [ 2536.514404] io_uring_setup+0x17ed/0x2980 [ 2536.515045] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2536.515825] ? wait_for_completion_io+0x270/0x270 [ 2536.516415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.517032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.517631] do_syscall_64+0x33/0x40 [ 2536.518067] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.518659] RIP: 0033:0x7f9c3da0ab19 05:07:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 23) [ 2536.519092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.521438] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2536.522305] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2536.522786] FAULT_INJECTION: forcing a failure. [ 2536.522786] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.523133] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2536.523141] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2536.523148] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2536.523154] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2536.533754] CPU: 0 PID: 12984 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2536.535560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.537738] Call Trace: [ 2536.538430] dump_stack+0x107/0x167 [ 2536.539381] should_fail.cold+0x5/0xa [ 2536.540382] ? create_object.isra.0+0x3a/0xa20 [ 2536.541557] should_failslab+0x5/0x20 [ 2536.542537] kmem_cache_alloc+0x5b/0x310 [ 2536.543591] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2536.544905] ? trace_hardirqs_on+0x5b/0x180 [ 2536.546024] create_object.isra.0+0x3a/0xa20 [ 2536.547149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.548459] kmem_cache_alloc_trace+0x151/0x320 [ 2536.549646] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2536.551006] io_uring_setup+0x14f6/0x2980 [ 2536.552074] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2536.553350] ? wait_for_completion_io+0x270/0x270 [ 2536.554603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.555944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.557266] do_syscall_64+0x33/0x40 [ 2536.558211] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.559524] RIP: 0033:0x7f838ee79b19 [ 2536.560469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.565144] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 05:07:47 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 16) [ 2536.567069] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2536.569065] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2536.570853] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2536.572664] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2536.574474] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2536.606470] FAULT_INJECTION: forcing a failure. [ 2536.606470] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.607947] CPU: 1 PID: 12992 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2536.608736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.609689] Call Trace: [ 2536.609997] dump_stack+0x107/0x167 [ 2536.610412] should_fail.cold+0x5/0xa [ 2536.610847] ? copy_process+0x3301/0x78b0 [ 2536.611320] should_failslab+0x5/0x20 [ 2536.611751] kmem_cache_alloc_node+0x55/0x330 [ 2536.612287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.612886] copy_process+0x3301/0x78b0 [ 2536.613352] ? stack_trace_save+0x8c/0xc0 [ 2536.613824] ? lock_acquire+0x197/0x470 [ 2536.614288] ? io_sq_thread_park+0x79/0xd0 [ 2536.614780] ? lock_release+0x680/0x680 [ 2536.615236] ? __cleanup_sighand+0xb0/0xb0 [ 2536.615722] ? kernel_text_address+0xf2/0x120 [ 2536.616244] ? find_held_lock+0x2c/0x110 [ 2536.616707] ? io_uring_setup+0x1c23/0x2980 [ 2536.617199] ? lock_downgrade+0x6d0/0x6d0 [ 2536.617671] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2536.618224] create_io_thread+0xb6/0xf0 [ 2536.618676] ? pidfd_prepare+0x80/0x80 [ 2536.619127] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2536.619694] io_uring_setup+0x1d79/0x2980 [ 2536.620178] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2536.620753] ? wait_for_completion_io+0x270/0x270 [ 2536.621317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.621916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.622497] do_syscall_64+0x33/0x40 [ 2536.622923] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.623501] RIP: 0033:0x7f9c3da0ab19 [ 2536.623933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.626018] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2536.626883] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2536.627695] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2536.628512] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2536.629324] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2536.630135] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2536.689599] FAULT_INJECTION: forcing a failure. [ 2536.689599] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.690959] CPU: 1 PID: 12996 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2536.691760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.692729] Call Trace: [ 2536.693034] dump_stack+0x107/0x167 [ 2536.693449] should_fail.cold+0x5/0xa [ 2536.693883] ? proc_reg_open+0x1f1/0x5d0 [ 2536.694349] should_failslab+0x5/0x20 [ 2536.694781] kmem_cache_alloc+0x5b/0x310 [ 2536.695257] proc_reg_open+0x1f1/0x5d0 [ 2536.695703] do_dentry_open+0x4b7/0x1090 [ 2536.696179] ? proc_reg_read+0x300/0x300 [ 2536.696640] ? may_open+0x1e4/0x400 [ 2536.697066] path_openat+0x19ba/0x2770 [ 2536.697515] ? path_lookupat+0x860/0x860 [ 2536.697980] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2536.698575] ? lock_acquire+0x197/0x470 [ 2536.699029] ? find_held_lock+0x2c/0x110 [ 2536.699497] do_filp_open+0x190/0x3e0 [ 2536.699936] ? may_open_dev+0xf0/0xf0 [ 2536.700386] ? simple_attr_release+0x50/0x50 [ 2536.700896] ? _raw_spin_unlock+0x1a/0x30 [ 2536.701371] ? alloc_fd+0x2e7/0x670 [ 2536.701789] do_sys_openat2+0x171/0x4d0 [ 2536.702261] ? build_open_flags+0x6f0/0x6f0 [ 2536.702745] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2536.703303] ? wait_for_completion_io+0x270/0x270 [ 2536.703854] __x64_sys_openat+0x13f/0x1f0 [ 2536.704350] ? __ia32_sys_open+0x1c0/0x1c0 [ 2536.704825] ? ksys_write+0x1a9/0x260 [ 2536.705265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.705860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.706452] do_syscall_64+0x33/0x40 [ 2536.706876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.707469] RIP: 0033:0x7f10a0111a04 [ 2536.707891] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2536.710002] RSP: 002b:00007f109d6b3060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2536.710867] RAX: ffffffffffffffda RBX: 00007f10a0272020 RCX: 00007f10a0111a04 [ 2536.711675] RDX: 0000000000000002 RSI: 00007f109d6b30f0 RDI: 00000000ffffff9c [ 2536.712493] RBP: 00007f109d6b30f0 R08: 0000000000000000 R09: 00007f109d6b2f70 [ 2536.713309] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2536.714122] R13: 00007ffef8f5f4df R14: 00007f109d6b3300 R15: 0000000000022000 05:08:00 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 35) [ 2549.150983] FAULT_INJECTION: forcing a failure. [ 2549.150983] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.154296] CPU: 0 PID: 13013 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2549.156411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.158722] Call Trace: [ 2549.159452] dump_stack+0x107/0x167 [ 2549.160475] should_fail.cold+0x5/0xa [ 2549.161534] ? create_object.isra.0+0x3a/0xa20 [ 2549.162773] should_failslab+0x5/0x20 [ 2549.163827] kmem_cache_alloc+0x5b/0x310 [ 2549.164941] create_object.isra.0+0x3a/0xa20 [ 2549.166143] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2549.167539] kmem_cache_alloc_node+0x169/0x330 [ 2549.168825] copy_process+0x3301/0x78b0 [ 2549.169912] ? stack_trace_save+0x8c/0xc0 [ 2549.171070] ? lock_acquire+0x197/0x470 [ 2549.172149] ? io_sq_thread_park+0x79/0xd0 [ 2549.173323] ? lock_release+0x680/0x680 [ 2549.174433] ? __cleanup_sighand+0xb0/0xb0 [ 2549.175578] ? kernel_text_address+0xf2/0x120 [ 2549.176837] ? find_held_lock+0x2c/0x110 [ 2549.177948] ? io_uring_setup+0x1c23/0x2980 [ 2549.179146] ? lock_downgrade+0x6d0/0x6d0 [ 2549.180287] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2549.181643] create_io_thread+0xb6/0xf0 [ 2549.182724] ? pidfd_prepare+0x80/0x80 [ 2549.183804] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2549.185160] io_uring_setup+0x1d79/0x2980 [ 2549.186286] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2549.187661] ? wait_for_completion_io+0x270/0x270 [ 2549.189011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.190437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.191845] do_syscall_64+0x33/0x40 [ 2549.192880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2549.194280] RIP: 0033:0x7f9c3da0ab19 [ 2549.195290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.199646] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2549.201382] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2549.202986] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2549.204598] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2549.206210] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2549.207816] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:08:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x1100) 05:08:00 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 17) 05:08:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2ff7, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:08:00 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:08:00 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r5+10000000}}, &(0x7f0000000140)) 05:08:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xff03000000000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:08:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 24) [ 2549.219759] FAULT_INJECTION: forcing a failure. [ 2549.219759] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.222395] CPU: 0 PID: 13019 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2549.223973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.225850] Call Trace: [ 2549.226448] dump_stack+0x107/0x167 [ 2549.227271] should_fail.cold+0x5/0xa [ 2549.228153] ? create_object.isra.0+0x3a/0xa20 [ 2549.229181] should_failslab+0x5/0x20 [ 2549.230044] kmem_cache_alloc+0x5b/0x310 [ 2549.230965] create_object.isra.0+0x3a/0xa20 [ 2549.231962] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2549.232484] FAULT_INJECTION: forcing a failure. [ 2549.232484] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.233118] kmem_cache_alloc+0x159/0x310 [ 2549.233145] proc_reg_open+0x1f1/0x5d0 [ 2549.233166] do_dentry_open+0x4b7/0x1090 [ 2549.237151] ? proc_reg_read+0x300/0x300 [ 2549.238079] ? may_open+0x1e4/0x400 [ 2549.238904] path_openat+0x19ba/0x2770 [ 2549.239797] ? path_lookupat+0x860/0x860 [ 2549.240748] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2549.241921] ? lock_acquire+0x197/0x470 [ 2549.242819] ? find_held_lock+0x2c/0x110 [ 2549.243750] do_filp_open+0x190/0x3e0 [ 2549.244620] ? may_open_dev+0xf0/0xf0 [ 2549.245495] ? simple_attr_release+0x50/0x50 [ 2549.246503] ? _raw_spin_unlock+0x1a/0x30 [ 2549.247443] ? alloc_fd+0x2e7/0x670 [ 2549.248287] do_sys_openat2+0x171/0x4d0 [ 2549.249189] ? build_open_flags+0x6f0/0x6f0 [ 2549.250162] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2549.251244] ? wait_for_completion_io+0x270/0x270 [ 2549.252350] __x64_sys_openat+0x13f/0x1f0 [ 2549.253290] ? __ia32_sys_open+0x1c0/0x1c0 [ 2549.254250] ? ksys_write+0x1a9/0x260 [ 2549.255124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.256360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.257531] do_syscall_64+0x33/0x40 [ 2549.258390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2549.259558] RIP: 0033:0x7f10a0111a04 [ 2549.260403] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2549.264617] RSP: 002b:00007f109d6b3060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2549.266346] RAX: ffffffffffffffda RBX: 00007f10a0272020 RCX: 00007f10a0111a04 [ 2549.267966] RDX: 0000000000000002 RSI: 00007f109d6b30f0 RDI: 00000000ffffff9c [ 2549.269602] RBP: 00007f109d6b30f0 R08: 0000000000000000 R09: 00007f109d6b2f70 [ 2549.271223] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2549.272850] R13: 00007ffef8f5f4df R14: 00007f109d6b3300 R15: 0000000000022000 [ 2549.274483] CPU: 1 PID: 13012 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2549.275291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.276192] Call Trace: [ 2549.276501] dump_stack+0x107/0x167 [ 2549.276897] should_fail.cold+0x5/0xa [ 2549.277340] ? create_object.isra.0+0x3a/0xa20 [ 2549.277836] should_failslab+0x5/0x20 [ 2549.278274] kmem_cache_alloc+0x5b/0x310 [ 2549.278715] create_object.isra.0+0x3a/0xa20 [ 2549.279226] kmemleak_alloc_percpu+0xa0/0x100 [ 2549.279711] pcpu_alloc+0x4e2/0x1240 [ 2549.280150] ? io_async_queue_proc+0x80/0x80 [ 2549.280623] percpu_ref_init+0x31/0x3d0 [ 2549.281082] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2549.281668] io_uring_setup+0x14f6/0x2980 [ 2549.282146] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2549.282692] ? wait_for_completion_io+0x270/0x270 [ 2549.283255] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.283822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.284419] do_syscall_64+0x33/0x40 [ 2549.284824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2549.285410] RIP: 0033:0x7f838ee79b19 [ 2549.285815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.287913] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2549.288732] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2549.289496] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2549.290302] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2549.291067] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2549.291831] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2549.292940] loop2: detected capacity change from 0 to 11776 [ 2549.306592] FAT-fs (loop2): bogus number of reserved sectors [ 2549.307354] FAT-fs (loop2): Can't find a valid FAT filesystem 05:08:00 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 18) 05:08:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 25) 05:08:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xffffff7f00000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2549.358125] loop2: detected capacity change from 0 to 11776 [ 2549.369659] FAT-fs (loop2): bogus number of reserved sectors [ 2549.370362] FAT-fs (loop2): Can't find a valid FAT filesystem 05:08:00 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2549.404401] FAULT_INJECTION: forcing a failure. [ 2549.404401] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.405694] CPU: 1 PID: 13036 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2549.406488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.407427] Call Trace: [ 2549.407735] dump_stack+0x107/0x167 [ 2549.408168] should_fail.cold+0x5/0xa [ 2549.408611] ? getname_flags.part.0+0x50/0x4f0 [ 2549.409140] should_failslab+0x5/0x20 [ 2549.409578] kmem_cache_alloc+0x5b/0x310 [ 2549.410047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.410649] getname_flags.part.0+0x50/0x4f0 [ 2549.411156] getname+0x8e/0xd0 [ 2549.411527] do_sys_openat2+0xf9/0x4d0 [ 2549.411977] ? security_file_free+0xaa/0xd0 [ 2549.412479] ? build_open_flags+0x6f0/0x6f0 [ 2549.412979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.413583] ? call_rcu+0x435/0x9c0 [ 2549.414002] __x64_sys_openat+0x13f/0x1f0 [ 2549.414481] ? __ia32_sys_open+0x1c0/0x1c0 [ 2549.414970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.415577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.416177] do_syscall_64+0x33/0x40 [ 2549.416603] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2549.417197] RIP: 0033:0x7f10a0111a04 [ 2549.417623] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2549.419730] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2549.420612] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2549.421438] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2549.422259] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2549.423078] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2549.423903] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2549.430972] FAULT_INJECTION: forcing a failure. [ 2549.430972] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2549.432562] CPU: 1 PID: 13037 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2549.433367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.434319] Call Trace: [ 2549.434621] dump_stack+0x107/0x167 [ 2549.435041] should_fail.cold+0x5/0xa [ 2549.435481] __alloc_pages_nodemask+0x182/0x600 [ 2549.436014] ? lock_downgrade+0x6d0/0x6d0 [ 2549.436498] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2549.437189] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2549.437784] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2549.438336] copy_process+0x62b/0x78b0 [ 2549.438787] ? stack_trace_save+0x8c/0xc0 [ 2549.439273] ? lock_acquire+0x197/0x470 [ 2549.439729] ? io_sq_thread_park+0x79/0xd0 [ 2549.440224] ? lock_release+0x680/0x680 [ 2549.440685] ? __cleanup_sighand+0xb0/0xb0 [ 2549.441171] ? kernel_text_address+0xf2/0x120 [ 2549.441687] ? find_held_lock+0x2c/0x110 [ 2549.442151] ? io_uring_setup+0x1c23/0x2980 [ 2549.442643] ? lock_downgrade+0x6d0/0x6d0 [ 2549.443120] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2549.443681] create_io_thread+0xb6/0xf0 [ 2549.444148] ? pidfd_prepare+0x80/0x80 [ 2549.444596] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2549.445167] io_uring_setup+0x1d79/0x2980 [ 2549.445646] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2549.446227] ? wait_for_completion_io+0x270/0x270 [ 2549.446792] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.447399] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.447990] do_syscall_64+0x33/0x40 [ 2549.448426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2549.449012] RIP: 0033:0x7f9c3da0ab19 [ 2549.449437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.451560] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2549.452437] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2549.453255] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2549.454077] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2549.454890] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2549.455706] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:08:00 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 36) 05:08:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2ffd, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2549.498517] loop2: detected capacity change from 0 to 11776 [ 2549.503192] FAT-fs (loop2): bogus number of reserved sectors [ 2549.503887] FAT-fs (loop2): Can't find a valid FAT filesystem 05:08:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xffffffff00000000, 0x3}, 0x200000}], 0x7ffff000, 0x0) 05:08:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x3001, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2549.554320] FAULT_INJECTION: forcing a failure. [ 2549.554320] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.557075] CPU: 0 PID: 13048 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2549.558672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.560591] Call Trace: [ 2549.561201] dump_stack+0x107/0x167 [ 2549.562036] should_fail.cold+0x5/0xa [ 2549.562909] ? create_object.isra.0+0x3a/0xa20 [ 2549.563955] should_failslab+0x5/0x20 05:08:00 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r5+10000000}}, &(0x7f0000000140)) [ 2549.564823] kmem_cache_alloc+0x5b/0x310 [ 2549.565856] create_object.isra.0+0x3a/0xa20 [ 2549.566868] kmemleak_alloc_percpu+0xa0/0x100 [ 2549.567883] pcpu_alloc+0x4e2/0x1240 [ 2549.568754] ? io_async_queue_proc+0x80/0x80 [ 2549.569754] percpu_ref_init+0x31/0x3d0 [ 2549.570671] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2549.571902] io_uring_setup+0x14f6/0x2980 [ 2549.572860] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2549.574010] ? wait_for_completion_io+0x270/0x270 [ 2549.575115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.576312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.577478] do_syscall_64+0x33/0x40 [ 2549.578301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2549.579462] RIP: 0033:0x7f838ee79b19 [ 2549.580294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.584478] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2549.586160] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2549.587735] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2549.589326] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2549.590911] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2549.592503] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2549.739687] loop2: detected capacity change from 0 to 12288 [ 2549.744481] FAT-fs (loop2): bogus number of reserved sectors [ 2549.745180] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2549.768390] loop2: detected capacity change from 0 to 12288 [ 2549.771432] FAT-fs (loop2): bogus number of reserved sectors [ 2549.772167] FAT-fs (loop2): Can't find a valid FAT filesystem 05:08:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x3013, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:08:20 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:08:20 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r5+10000000}}, &(0x7f0000000140)) 05:08:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x2}, 0x200000}], 0x7ffff000, 0x0) [ 2569.720834] FAULT_INJECTION: forcing a failure. [ 2569.720834] name failslab, interval 1, probability 0, space 0, times 0 [ 2569.723488] CPU: 0 PID: 13074 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2569.725068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 05:08:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 26) 05:08:20 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 19) 05:08:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x2000) 05:08:20 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 37) [ 2569.726966] Call Trace: [ 2569.727657] dump_stack+0x107/0x167 [ 2569.728498] should_fail.cold+0x5/0xa [ 2569.729367] ? __delayacct_tsk_init+0x1b/0x80 [ 2569.730378] should_failslab+0x5/0x20 [ 2569.731243] kmem_cache_alloc+0x5b/0x310 [ 2569.732157] __delayacct_tsk_init+0x1b/0x80 [ 2569.733024] FAULT_INJECTION: forcing a failure. [ 2569.733024] name failslab, interval 1, probability 0, space 0, times 0 [ 2569.733145] copy_process+0x3395/0x78b0 [ 2569.735440] ? stack_trace_save+0x8c/0xc0 [ 2569.736387] ? lock_acquire+0x197/0x470 [ 2569.737275] ? io_sq_thread_park+0x79/0xd0 [ 2569.738228] ? __cleanup_sighand+0xb0/0xb0 [ 2569.739175] ? kernel_text_address+0xf2/0x120 [ 2569.740187] ? find_held_lock+0x2c/0x110 [ 2569.741114] ? io_uring_setup+0x1c23/0x2980 [ 2569.742089] ? lock_downgrade+0x6d0/0x6d0 [ 2569.743031] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2569.744128] create_io_thread+0xb6/0xf0 [ 2569.745042] ? pidfd_prepare+0x80/0x80 [ 2569.745923] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2569.747038] io_uring_setup+0x1d79/0x2980 [ 2569.747968] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2569.749112] ? wait_for_completion_io+0x270/0x270 [ 2569.750206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2569.751374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2569.752541] do_syscall_64+0x33/0x40 [ 2569.753377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2569.754536] RIP: 0033:0x7f9c3da0ab19 [ 2569.755367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2569.759481] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2569.761206] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2569.762819] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2569.764453] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2569.766069] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2569.767686] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2569.769325] CPU: 1 PID: 13070 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2569.770223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2569.771280] Call Trace: [ 2569.771618] dump_stack+0x107/0x167 [ 2569.772086] should_fail.cold+0x5/0xa [ 2569.772578] ? create_object.isra.0+0x3a/0xa20 [ 2569.773158] should_failslab+0x5/0x20 [ 2569.773651] kmem_cache_alloc+0x5b/0x310 [ 2569.774165] ? exit_to_user_mode_prepare+0x186/0x190 [ 2569.774813] ? syscall_exit_to_user_mode+0x38/0x1d0 [ 2569.775450] create_object.isra.0+0x3a/0xa20 [ 2569.776006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2569.776653] kmem_cache_alloc+0x159/0x310 [ 2569.777172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2569.777826] getname_flags.part.0+0x50/0x4f0 [ 2569.778384] getname+0x8e/0xd0 [ 2569.778790] do_sys_openat2+0xf9/0x4d0 [ 2569.779282] ? security_file_free+0xaa/0xd0 [ 2569.779811] ? build_open_flags+0x6f0/0x6f0 [ 2569.780357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2569.780997] ? call_rcu+0x435/0x9c0 [ 2569.781445] __x64_sys_openat+0x13f/0x1f0 [ 2569.781959] ? __ia32_sys_open+0x1c0/0x1c0 [ 2569.782493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2569.783143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2569.783783] do_syscall_64+0x33/0x40 [ 2569.784254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2569.784893] RIP: 0033:0x7f10a0111a04 [ 2569.785363] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2569.787668] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2569.788629] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2569.789513] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2569.790389] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2569.791266] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2569.792172] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2569.797385] FAULT_INJECTION: forcing a failure. [ 2569.797385] name failslab, interval 1, probability 0, space 0, times 0 [ 2569.798846] CPU: 1 PID: 13081 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2569.799708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2569.800745] Call Trace: [ 2569.801079] dump_stack+0x107/0x167 [ 2569.801522] should_fail.cold+0x5/0xa [ 2569.801991] ? percpu_ref_init+0xd8/0x3d0 [ 2569.802506] should_failslab+0x5/0x20 [ 2569.802978] kmem_cache_alloc_trace+0x55/0x320 [ 2569.803546] ? io_async_queue_proc+0x80/0x80 [ 2569.804110] percpu_ref_init+0xd8/0x3d0 [ 2569.804616] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2569.805297] io_uring_setup+0x14f6/0x2980 [ 2569.805829] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2569.806458] ? wait_for_completion_io+0x270/0x270 [ 2569.807081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2569.807733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2569.808395] do_syscall_64+0x33/0x40 [ 2569.808861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2569.809504] RIP: 0033:0x7f838ee79b19 [ 2569.809967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2569.812266] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2569.813205] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2569.814090] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2569.814981] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2569.815874] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2569.816761] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2569.831927] loop2: detected capacity change from 0 to 12288 [ 2569.838040] FAT-fs (loop2): bogus number of reserved sectors [ 2569.839436] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2569.863779] loop2: detected capacity change from 0 to 12288 [ 2569.870294] FAT-fs (loop2): bogus number of reserved sectors [ 2569.871706] FAT-fs (loop2): Can't find a valid FAT filesystem 05:08:20 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, 0x0}}, &(0x7f0000000140)) 05:08:20 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:08:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 27) 05:08:21 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 20) 05:08:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x3015, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2570.031494] FAULT_INJECTION: forcing a failure. [ 2570.031494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2570.034232] CPU: 0 PID: 13097 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2570.035363] FAULT_INJECTION: forcing a failure. [ 2570.035363] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.035789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.035800] Call Trace: [ 2570.039522] dump_stack+0x107/0x167 [ 2570.040366] should_fail.cold+0x5/0xa [ 2570.041223] strncpy_from_user+0x34/0x470 [ 2570.042189] getname_flags.part.0+0x95/0x4f0 [ 2570.043194] getname+0x8e/0xd0 [ 2570.043932] do_sys_openat2+0xf9/0x4d0 [ 2570.044823] ? security_file_free+0xaa/0xd0 [ 2570.045810] ? build_open_flags+0x6f0/0x6f0 [ 2570.046835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.048032] ? call_rcu+0x435/0x9c0 [ 2570.048881] __x64_sys_openat+0x13f/0x1f0 [ 2570.049824] ? __ia32_sys_open+0x1c0/0x1c0 [ 2570.050782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.051987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.053195] do_syscall_64+0x33/0x40 [ 2570.054058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.055248] RIP: 0033:0x7f10a0111a04 [ 2570.056109] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2570.060366] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2570.062118] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2570.063750] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2570.065427] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2570.067073] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2570.068718] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2570.070377] CPU: 1 PID: 13099 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2570.071172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.072106] Call Trace: [ 2570.072428] dump_stack+0x107/0x167 [ 2570.072840] should_fail.cold+0x5/0xa [ 2570.073283] ? create_object.isra.0+0x3a/0xa20 [ 2570.073807] should_failslab+0x5/0x20 [ 2570.074250] kmem_cache_alloc+0x5b/0x310 [ 2570.074721] create_object.isra.0+0x3a/0xa20 [ 2570.075220] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.075811] kmem_cache_alloc+0x159/0x310 [ 2570.076300] __delayacct_tsk_init+0x1b/0x80 [ 2570.076803] copy_process+0x3395/0x78b0 [ 2570.077264] ? stack_trace_save+0x8c/0xc0 [ 2570.077728] ? lock_acquire+0x197/0x470 [ 2570.078185] ? io_sq_thread_park+0x79/0xd0 [ 2570.078670] ? __cleanup_sighand+0xb0/0xb0 [ 2570.079160] ? kernel_text_address+0xf2/0x120 [ 2570.079671] ? find_held_lock+0x2c/0x110 [ 2570.080148] ? io_uring_setup+0x1c23/0x2980 [ 2570.080648] ? lock_downgrade+0x6d0/0x6d0 [ 2570.081121] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2570.081687] create_io_thread+0xb6/0xf0 [ 2570.082142] ? pidfd_prepare+0x80/0x80 [ 2570.082581] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2570.083139] io_uring_setup+0x1d79/0x2980 [ 2570.083602] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2570.084165] ? wait_for_completion_io+0x270/0x270 [ 2570.084725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.085311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.085886] do_syscall_64+0x33/0x40 [ 2570.086320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.086903] RIP: 0033:0x7f9c3da0ab19 [ 2570.087320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2570.089376] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2570.090249] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2570.091062] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2570.091872] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2570.092690] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2570.093498] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:08:21 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 38) [ 2570.146679] FAULT_INJECTION: forcing a failure. [ 2570.146679] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.149323] CPU: 0 PID: 13105 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2570.150907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.152837] Call Trace: [ 2570.153457] dump_stack+0x107/0x167 [ 2570.154305] should_fail.cold+0x5/0xa [ 2570.155196] ? create_object.isra.0+0x3a/0xa20 [ 2570.156273] should_failslab+0x5/0x20 [ 2570.157167] kmem_cache_alloc+0x5b/0x310 [ 2570.158121] create_object.isra.0+0x3a/0xa20 [ 2570.159148] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.160351] kmem_cache_alloc_trace+0x151/0x320 [ 2570.161427] ? io_async_queue_proc+0x80/0x80 [ 2570.162440] percpu_ref_init+0xd8/0x3d0 [ 2570.163369] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2570.164605] io_uring_setup+0x14f6/0x2980 [ 2570.165568] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2570.166727] ? wait_for_completion_io+0x270/0x270 [ 2570.167867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.169096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.170278] do_syscall_64+0x33/0x40 [ 2570.171134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.172319] RIP: 0033:0x7f838ee79b19 [ 2570.173187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2570.177434] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2570.179203] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2570.180834] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2570.182483] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2570.184123] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2570.185773] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2570.293668] loop2: detected capacity change from 0 to 12288 [ 2570.311090] FAT-fs (loop2): bogus number of reserved sectors [ 2570.312576] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2570.343921] loop2: detected capacity change from 0 to 12288 [ 2570.356078] FAT-fs (loop2): bogus number of reserved sectors [ 2570.357806] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2584.107509] FAULT_INJECTION: forcing a failure. [ 2584.107509] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:08:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 28) 05:08:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x200000}], 0x7ffff000, 0x0) 05:08:35 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 39) 05:08:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x3000) 05:08:35 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:08:35 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 21) 05:08:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, 0x0}}, &(0x7f0000000140)) 05:08:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x3017, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2584.111497] CPU: 0 PID: 13124 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2584.113124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.115006] Call Trace: [ 2584.115604] dump_stack+0x107/0x167 [ 2584.116445] should_fail.cold+0x5/0xa [ 2584.117317] strncpy_from_user+0x34/0x470 [ 2584.118260] getname_flags.part.0+0x95/0x4f0 [ 2584.119260] getname+0x8e/0xd0 [ 2584.119986] do_sys_openat2+0xf9/0x4d0 [ 2584.120882] ? security_file_free+0xaa/0xd0 [ 2584.121855] ? build_open_flags+0x6f0/0x6f0 [ 2584.122837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.124015] ? call_rcu+0x435/0x9c0 [ 2584.124852] __x64_sys_openat+0x13f/0x1f0 [ 2584.125786] ? __ia32_sys_open+0x1c0/0x1c0 [ 2584.126746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.127930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.129102] do_syscall_64+0x33/0x40 [ 2584.129942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.131097] RIP: 0033:0x7f10a0111a04 [ 2584.131945] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2584.136100] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2584.137827] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2584.139435] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2584.141055] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2584.142666] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2584.144276] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2584.147654] loop2: detected capacity change from 0 to 12288 [ 2584.148956] FAULT_INJECTION: forcing a failure. [ 2584.148956] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.148976] CPU: 0 PID: 13132 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2584.148986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.148992] Call Trace: [ 2584.149012] dump_stack+0x107/0x167 [ 2584.149033] should_fail.cold+0x5/0xa [ 2584.149059] ? alloc_pid+0xd7/0xd30 [ 2584.157925] should_failslab+0x5/0x20 [ 2584.158793] kmem_cache_alloc+0x5b/0x310 [ 2584.159720] alloc_pid+0xd7/0xd30 [ 2584.160528] ? copy_namespaces+0x1ca/0x4f0 [ 2584.161383] FAT-fs (loop2): bogus number of reserved sectors [ 2584.161500] copy_process+0x3b87/0x78b0 [ 2584.162770] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2584.163610] ? stack_trace_save+0x8c/0xc0 [ 2584.163648] ? __cleanup_sighand+0xb0/0xb0 [ 2584.166747] ? kernel_text_address+0xf2/0x120 [ 2584.167779] ? find_held_lock+0x2c/0x110 [ 2584.168729] ? io_uring_setup+0x1c23/0x2980 [ 2584.169719] ? lock_downgrade+0x6d0/0x6d0 [ 2584.170671] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2584.171828] create_io_thread+0xb6/0xf0 [ 2584.172762] ? pidfd_prepare+0x80/0x80 [ 2584.173654] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2584.174788] io_uring_setup+0x1d79/0x2980 [ 2584.175739] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2584.176899] ? wait_for_completion_io+0x270/0x270 [ 2584.178014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.179209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.180394] do_syscall_64+0x33/0x40 [ 2584.181243] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.182406] RIP: 0033:0x7f9c3da0ab19 [ 2584.183252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2584.187446] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2584.189185] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2584.190809] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2584.192491] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2584.194178] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2584.195868] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2584.202448] FAULT_INJECTION: forcing a failure. [ 2584.202448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2584.205201] CPU: 0 PID: 13136 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2584.206831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.208733] Call Trace: [ 2584.209351] dump_stack+0x107/0x167 [ 2584.210182] should_fail.cold+0x5/0xa [ 2584.211080] _copy_to_user+0x2e/0x180 [ 2584.211949] io_uring_setup+0x11b5/0x2980 [ 2584.212931] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2584.214082] ? wait_for_completion_io+0x270/0x270 [ 2584.215236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.216442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.217651] do_syscall_64+0x33/0x40 [ 2584.218501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.219703] RIP: 0033:0x7f838ee79b19 [ 2584.220561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2584.224877] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2584.226609] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2584.228275] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2584.229943] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2584.231603] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2584.233271] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2584.279749] loop2: detected capacity change from 0 to 12288 [ 2584.300133] FAT-fs (loop2): bogus number of reserved sectors [ 2584.301948] FAT-fs (loop2): Can't find a valid FAT filesystem 05:08:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 29) 05:08:35 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 22) 05:08:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, 0x0}}, &(0x7f0000000140)) [ 2584.333503] FAULT_INJECTION: forcing a failure. [ 2584.333503] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.335907] CPU: 1 PID: 13144 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2584.337363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.339100] Call Trace: [ 2584.339634] dump_stack+0x107/0x167 [ 2584.340388] should_fail.cold+0x5/0xa [ 2584.341159] ? create_object.isra.0+0x3a/0xa20 [ 2584.342086] should_failslab+0x5/0x20 [ 2584.342860] kmem_cache_alloc+0x5b/0x310 [ 2584.343702] create_object.isra.0+0x3a/0xa20 [ 2584.344655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2584.345730] kmem_cache_alloc+0x159/0x310 [ 2584.346596] __alloc_file+0x21/0x320 [ 2584.347371] alloc_empty_file+0x6d/0x170 [ 2584.348202] path_openat+0xe6/0x2770 [ 2584.348979] ? __lock_acquire+0x1657/0x5b00 [ 2584.349862] ? path_lookupat+0x860/0x860 [ 2584.350687] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2584.351752] ? lock_acquire+0x197/0x470 [ 2584.352594] ? find_held_lock+0x2c/0x110 [ 2584.353446] do_filp_open+0x190/0x3e0 [ 2584.354221] ? may_open_dev+0xf0/0xf0 [ 2584.354995] ? alloc_fd+0x2e7/0x670 [ 2584.355729] ? lock_downgrade+0x6d0/0x6d0 [ 2584.356572] ? do_raw_spin_lock+0x121/0x260 [ 2584.357446] ? rwlock_bug.part.0+0x90/0x90 [ 2584.358315] ? _raw_spin_unlock+0x1a/0x30 [ 2584.359159] ? alloc_fd+0x2e7/0x670 [ 2584.359909] do_sys_openat2+0x171/0x4d0 [ 2584.360742] ? security_file_free+0xaa/0xd0 [ 2584.361623] ? build_open_flags+0x6f0/0x6f0 [ 2584.362505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.363565] ? call_rcu+0x435/0x9c0 [ 2584.364315] __x64_sys_openat+0x13f/0x1f0 [ 2584.365165] ? __ia32_sys_open+0x1c0/0x1c0 [ 2584.366015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 05:08:35 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2584.367266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.368512] do_syscall_64+0x33/0x40 [ 2584.369279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.370315] RIP: 0033:0x7f10a0111a04 [ 2584.371067] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2584.374799] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2584.376355] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2584.377803] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2584.379239] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2584.380687] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2584.382113] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2584.401150] FAULT_INJECTION: forcing a failure. [ 2584.401150] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.403472] CPU: 1 PID: 13147 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2584.404887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.406514] Call Trace: [ 2584.407043] dump_stack+0x107/0x167 [ 2584.407788] should_fail.cold+0x5/0xa [ 2584.408560] ? create_object.isra.0+0x3a/0xa20 [ 2584.409468] should_failslab+0x5/0x20 [ 2584.410216] kmem_cache_alloc+0x5b/0x310 [ 2584.411048] create_object.isra.0+0x3a/0xa20 [ 2584.411945] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2584.412986] kmem_cache_alloc+0x159/0x310 [ 2584.413831] alloc_pid+0xd7/0xd30 [ 2584.414545] ? copy_namespaces+0x1ca/0x4f0 [ 2584.415411] copy_process+0x3b87/0x78b0 [ 2584.416224] ? stack_trace_save+0x8c/0xc0 [ 2584.417099] ? __cleanup_sighand+0xb0/0xb0 [ 2584.417941] ? kernel_text_address+0xf2/0x120 [ 2584.418833] ? find_held_lock+0x2c/0x110 [ 2584.419646] ? io_uring_setup+0x1c23/0x2980 [ 2584.420515] ? lock_downgrade+0x6d0/0x6d0 [ 2584.421353] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2584.422337] create_io_thread+0xb6/0xf0 [ 2584.423128] ? pidfd_prepare+0x80/0x80 [ 2584.423926] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2584.424941] io_uring_setup+0x1d79/0x2980 [ 2584.425779] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2584.426766] ? wait_for_completion_io+0x270/0x270 05:08:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x3f00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2584.427728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.428939] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.429980] do_syscall_64+0x33/0x40 [ 2584.430712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.431728] RIP: 0033:0x7f9c3da0ab19 [ 2584.432498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2584.436225] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2584.437767] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2584.439215] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2584.440665] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2584.442098] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2584.443521] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:08:35 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 40) [ 2584.493506] FAULT_INJECTION: forcing a failure. [ 2584.493506] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.495777] CPU: 1 PID: 13153 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2584.497141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.498761] Call Trace: [ 2584.499276] dump_stack+0x107/0x167 [ 2584.499988] should_fail.cold+0x5/0xa [ 2584.500751] ? __d_alloc+0x2a/0x990 [ 2584.501461] should_failslab+0x5/0x20 [ 2584.502199] kmem_cache_alloc+0x5b/0x310 [ 2584.502993] __d_alloc+0x2a/0x990 [ 2584.503673] ? find_held_lock+0x2c/0x110 [ 2584.504474] d_alloc_pseudo+0x19/0x70 [ 2584.505216] alloc_file_pseudo+0xce/0x250 [ 2584.506013] ? trace_hardirqs_on+0x5b/0x180 [ 2584.506852] ? alloc_file+0x5a0/0x5a0 [ 2584.507603] anon_inode_getfile+0xc8/0x1f0 [ 2584.508448] io_uring_setup+0x138b/0x2980 [ 2584.509264] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2584.510242] ? wait_for_completion_io+0x270/0x270 [ 2584.511184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.512195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.513194] do_syscall_64+0x33/0x40 [ 2584.513909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.514892] RIP: 0033:0x7f838ee79b19 [ 2584.515605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2584.519139] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2584.520625] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2584.521998] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2584.523358] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2584.524738] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2584.526118] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2584.536332] loop2: detected capacity change from 0 to 15872 [ 2584.549739] FAT-fs (loop2): bogus number of reserved sectors [ 2584.551226] FAT-fs (loop2): Can't find a valid FAT filesystem 05:08:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 30) [ 2584.687886] FAULT_INJECTION: forcing a failure. [ 2584.687886] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.690015] CPU: 1 PID: 13161 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2584.691217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.692662] Call Trace: [ 2584.693125] dump_stack+0x107/0x167 [ 2584.693758] should_fail.cold+0x5/0xa [ 2584.694418] ? security_file_alloc+0x34/0x170 [ 2584.695200] should_failslab+0x5/0x20 [ 2584.695862] kmem_cache_alloc+0x5b/0x310 [ 2584.696585] security_file_alloc+0x34/0x170 [ 2584.697321] __alloc_file+0xb7/0x320 [ 2584.697965] alloc_empty_file+0x6d/0x170 [ 2584.698667] path_openat+0xe6/0x2770 [ 2584.699309] ? __lock_acquire+0x1657/0x5b00 [ 2584.700046] ? path_lookupat+0x860/0x860 [ 2584.700738] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2584.701650] ? lock_acquire+0x197/0x470 [ 2584.702336] ? find_held_lock+0x2c/0x110 [ 2584.703032] do_filp_open+0x190/0x3e0 [ 2584.703678] ? may_open_dev+0xf0/0xf0 [ 2584.704335] ? alloc_fd+0x2e7/0x670 [ 2584.704970] ? lock_downgrade+0x6d0/0x6d0 [ 2584.705675] ? do_raw_spin_lock+0x121/0x260 [ 2584.706406] ? rwlock_bug.part.0+0x90/0x90 [ 2584.707146] ? _raw_spin_unlock+0x1a/0x30 [ 2584.707854] ? alloc_fd+0x2e7/0x670 [ 2584.708496] do_sys_openat2+0x171/0x4d0 [ 2584.709173] ? security_file_free+0xaa/0xd0 [ 2584.709906] ? build_open_flags+0x6f0/0x6f0 [ 2584.710654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.711555] ? call_rcu+0x435/0x9c0 [ 2584.712183] __x64_sys_openat+0x13f/0x1f0 [ 2584.712904] ? __ia32_sys_open+0x1c0/0x1c0 [ 2584.713639] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.714536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.715416] do_syscall_64+0x33/0x40 [ 2584.716052] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.716928] RIP: 0033:0x7f10a0111a04 [ 2584.717563] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2584.720707] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2584.721992] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2584.723198] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2584.724421] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2584.725644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2584.726856] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:08:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200002}], 0x7ffff000, 0x0) 05:08:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x3100) 05:08:51 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 41) 05:08:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:08:51 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2600.254603] FAULT_INJECTION: forcing a failure. [ 2600.254603] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.255950] CPU: 1 PID: 13180 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2600.256754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.257707] Call Trace: [ 2600.258014] dump_stack+0x107/0x167 [ 2600.258433] should_fail.cold+0x5/0xa [ 2600.258876] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2600.259469] should_failslab+0x5/0x20 [ 2600.259915] kmem_cache_alloc_trace+0x55/0x320 [ 2600.260443] io_uring_alloc_task_context+0x99/0x6a0 [ 2600.261024] ? io_import_iovec+0x1120/0x1120 [ 2600.261537] io_uring_setup+0x1dd1/0x2980 [ 2600.262012] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2600.262586] ? wait_for_completion_io+0x270/0x270 [ 2600.263144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.263736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.264321] do_syscall_64+0x33/0x40 [ 2600.264748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2600.265327] RIP: 0033:0x7f9c3da0ab19 [ 2600.265750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.267843] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2600.268722] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2600.269543] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2600.270352] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2600.271163] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2600.271838] FAULT_INJECTION: forcing a failure. [ 2600.271838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2600.271978] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2600.277356] CPU: 0 PID: 13175 Comm: syz-executor.0 Not tainted 5.10.239 #1 05:08:51 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 23) 05:08:51 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, 0x0) 05:08:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 31) [ 2600.279275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.281715] Call Trace: [ 2600.282443] dump_stack+0x107/0x167 [ 2600.283419] should_fail.cold+0x5/0xa [ 2600.284460] _copy_to_user+0x2e/0x180 [ 2600.285528] io_uring_setup+0x11b5/0x2980 [ 2600.286661] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2600.288030] ? wait_for_completion_io+0x270/0x270 [ 2600.289378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.290815] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.292243] do_syscall_64+0x33/0x40 [ 2600.293281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2600.294704] RIP: 0033:0x7f838ee79b19 [ 2600.295735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.300858] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2600.302963] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2600.304940] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2600.306571] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2600.308210] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2600.308781] loop2: detected capacity change from 0 to 16384 [ 2600.309946] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2600.324257] FAT-fs (loop2): bogus number of reserved sectors [ 2600.324966] FAT-fs (loop2): Can't find a valid FAT filesystem 05:08:51 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 24) [ 2600.340739] loop2: detected capacity change from 0 to 16384 [ 2600.343908] FAT-fs (loop2): bogus number of reserved sectors [ 2600.344591] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2600.361739] FAULT_INJECTION: forcing a failure. [ 2600.361739] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.364428] CPU: 0 PID: 13190 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2600.366028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.367940] Call Trace: [ 2600.368558] dump_stack+0x107/0x167 [ 2600.369391] should_fail.cold+0x5/0xa [ 2600.370264] ? create_object.isra.0+0x3a/0xa20 [ 2600.371320] should_failslab+0x5/0x20 [ 2600.372192] kmem_cache_alloc+0x5b/0x310 [ 2600.373214] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2600.374557] create_object.isra.0+0x3a/0xa20 [ 2600.375558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2600.376742] kmem_cache_alloc+0x159/0x310 [ 2600.377693] security_file_alloc+0x34/0x170 [ 2600.378677] __alloc_file+0xb7/0x320 [ 2600.379537] alloc_empty_file+0x6d/0x170 [ 2600.380473] path_openat+0xe6/0x2770 [ 2600.381335] ? __lock_acquire+0x1657/0x5b00 [ 2600.382343] ? path_lookupat+0x860/0x860 [ 2600.383280] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2600.384467] ? lock_acquire+0x197/0x470 [ 2600.385377] ? find_held_lock+0x2c/0x110 [ 2600.386314] do_filp_open+0x190/0x3e0 [ 2600.387188] ? may_open_dev+0xf0/0xf0 [ 2600.388061] ? alloc_fd+0x2e7/0x670 [ 2600.388897] ? lock_downgrade+0x6d0/0x6d0 [ 2600.389845] ? do_raw_spin_lock+0x121/0x260 [ 2600.390818] ? rwlock_bug.part.0+0x90/0x90 [ 2600.391786] ? _raw_spin_unlock+0x1a/0x30 [ 2600.392736] ? alloc_fd+0x2e7/0x670 [ 2600.393568] do_sys_openat2+0x171/0x4d0 [ 2600.394464] ? security_file_free+0xaa/0xd0 [ 2600.395446] ? build_open_flags+0x6f0/0x6f0 [ 2600.396437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.397645] ? call_rcu+0x435/0x9c0 [ 2600.398479] __x64_sys_openat+0x13f/0x1f0 [ 2600.399423] ? __ia32_sys_open+0x1c0/0x1c0 [ 2600.400397] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.401594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.402765] do_syscall_64+0x33/0x40 [ 2600.403617] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2600.404797] RIP: 0033:0x7f10a0111a04 [ 2600.405644] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2600.409862] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2600.411591] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2600.413217] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2600.414845] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2600.416468] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2600.418114] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:08:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4800, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:08:51 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 42) [ 2600.468700] FAULT_INJECTION: forcing a failure. [ 2600.468700] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.470080] CPU: 1 PID: 13196 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2600.470868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.471828] Call Trace: [ 2600.472140] dump_stack+0x107/0x167 [ 2600.472568] should_fail.cold+0x5/0xa [ 2600.473006] ? create_object.isra.0+0x3a/0xa20 [ 2600.473535] should_failslab+0x5/0x20 [ 2600.473978] kmem_cache_alloc+0x5b/0x310 [ 2600.474446] create_object.isra.0+0x3a/0xa20 [ 2600.474953] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2600.475536] kmem_cache_alloc_trace+0x151/0x320 [ 2600.476080] io_uring_alloc_task_context+0x99/0x6a0 [ 2600.476656] ? io_import_iovec+0x1120/0x1120 [ 2600.477171] io_uring_setup+0x1dd1/0x2980 [ 2600.477657] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2600.478241] ? wait_for_completion_io+0x270/0x270 [ 2600.478816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.479419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.480023] do_syscall_64+0x33/0x40 [ 2600.480452] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2600.481064] RIP: 0033:0x7f9c3da0ab19 [ 2600.481496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.483633] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2600.484536] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2600.485366] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2600.486189] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2600.487011] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2600.487832] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2600.496273] loop2: detected capacity change from 0 to 18432 [ 2600.501036] FAT-fs (loop2): bogus number of reserved sectors [ 2600.501745] FAT-fs (loop2): Can't find a valid FAT filesystem 05:08:51 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:08:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4c00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2600.578603] FAULT_INJECTION: forcing a failure. [ 2600.578603] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.579944] CPU: 1 PID: 13206 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2600.580733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.581678] Call Trace: [ 2600.581981] dump_stack+0x107/0x167 [ 2600.582395] should_fail.cold+0x5/0xa [ 2600.582832] ? __alloc_file+0x21/0x320 [ 2600.583276] should_failslab+0x5/0x20 [ 2600.583709] kmem_cache_alloc+0x5b/0x310 [ 2600.584177] __alloc_file+0x21/0x320 [ 2600.584629] alloc_empty_file+0x6d/0x170 [ 2600.585108] alloc_file+0x5e/0x5a0 [ 2600.585521] alloc_file_pseudo+0x16a/0x250 [ 2600.586004] ? alloc_file+0x5a0/0x5a0 [ 2600.586450] anon_inode_getfile+0xc8/0x1f0 [ 2600.586949] io_uring_setup+0x138b/0x2980 [ 2600.587436] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2600.588027] ? wait_for_completion_io+0x270/0x270 [ 2600.588607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.589222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.589808] do_syscall_64+0x33/0x40 [ 2600.590241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2600.590819] RIP: 0033:0x7f838ee79b19 [ 2600.591242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.593384] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2600.594282] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2600.595126] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2600.595947] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2600.596768] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2600.597577] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:08:51 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 25) [ 2600.617437] loop2: detected capacity change from 0 to 19456 05:08:51 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, 0x0) [ 2600.656896] FAT-fs (loop2): bogus number of reserved sectors [ 2600.658377] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2600.664888] FAULT_INJECTION: forcing a failure. [ 2600.664888] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.667459] CPU: 0 PID: 13213 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2600.669061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.670960] Call Trace: [ 2600.671569] dump_stack+0x107/0x167 [ 2600.672394] should_fail.cold+0x5/0xa [ 2600.673266] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2600.674444] should_failslab+0x5/0x20 [ 2600.675308] kmem_cache_alloc_trace+0x55/0x320 [ 2600.676353] io_uring_alloc_task_context+0x99/0x6a0 [ 2600.677508] ? io_import_iovec+0x1120/0x1120 [ 2600.678525] io_uring_setup+0x1dd1/0x2980 [ 2600.679483] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2600.680651] ? wait_for_completion_io+0x270/0x270 [ 2600.681766] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.682971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.684152] do_syscall_64+0x33/0x40 [ 2600.685022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2600.686195] RIP: 0033:0x7f9c3da0ab19 [ 2600.687049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.691265] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2600.693024] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2600.694657] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2600.696288] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2600.697928] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2600.699570] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2600.741536] loop2: detected capacity change from 0 to 19456 05:08:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x4000) [ 2600.764666] FAT-fs (loop2): bogus number of reserved sectors [ 2600.766123] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2614.719575] FAULT_INJECTION: forcing a failure. [ 2614.719575] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.720958] CPU: 1 PID: 13244 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2614.721750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.722708] Call Trace: [ 2614.723012] dump_stack+0x107/0x167 [ 2614.723430] should_fail.cold+0x5/0xa [ 2614.723865] ? proc_thread_self_get_link+0x1a8/0x210 [ 2614.724444] should_failslab+0x5/0x20 [ 2614.724887] kmem_cache_alloc_trace+0x55/0x320 [ 2614.725414] proc_thread_self_get_link+0x1a8/0x210 [ 2614.725973] ? proc_setup_self+0x390/0x390 [ 2614.726455] step_into+0x1595/0x1ce0 [ 2614.726880] ? lookup_fast+0x6e0/0x6e0 [ 2614.727327] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2614.727844] walk_component+0x171/0x6a0 [ 2614.728293] ? trace_hardirqs_on+0x5b/0x180 [ 2614.728789] ? handle_dots.part.0+0x15c0/0x15c0 [ 2614.729320] ? security_inode_permission+0xcb/0x100 [ 2614.729892] link_path_walk.part.0+0x699/0xbf0 [ 2614.730414] ? walk_component+0x6a0/0x6a0 [ 2614.730887] ? percpu_counter_add_batch+0x8b/0x140 [ 2614.731452] path_openat+0x25d/0x2770 [ 2614.731892] ? path_lookupat+0x860/0x860 [ 2614.732354] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2614.732956] ? lock_acquire+0x197/0x470 [ 2614.733404] ? find_held_lock+0x2c/0x110 [ 2614.733872] do_filp_open+0x190/0x3e0 [ 2614.734310] ? may_open_dev+0xf0/0xf0 [ 2614.734752] ? rwlock_bug.part.0+0x90/0x90 [ 2614.735239] ? _raw_spin_unlock+0x1a/0x30 [ 2614.735712] ? alloc_fd+0x2e7/0x670 [ 2614.736133] do_sys_openat2+0x171/0x4d0 [ 2614.736585] ? security_file_free+0xaa/0xd0 [ 2614.737081] ? build_open_flags+0x6f0/0x6f0 [ 2614.737576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.738169] ? call_rcu+0x435/0x9c0 [ 2614.738586] __x64_sys_openat+0x13f/0x1f0 [ 2614.739055] ? __ia32_sys_open+0x1c0/0x1c0 [ 2614.739540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.740134] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.740730] do_syscall_64+0x33/0x40 [ 2614.741153] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2614.741734] RIP: 0033:0x7f10a0111a04 [ 2614.742155] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2614.744252] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2614.745126] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2614.745941] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2614.746751] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2614.747567] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2614.748384] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:09:05 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 26) 05:09:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xc805) 05:09:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200003}], 0x7ffff000, 0x0) 05:09:05 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:09:05 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 43) 05:09:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x6800, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:09:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 32) 05:09:05 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, 0x0) [ 2614.754358] loop2: detected capacity change from 0 to 26624 [ 2614.757741] FAT-fs (loop2): bogus number of reserved sectors [ 2614.758455] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2614.764752] FAULT_INJECTION: forcing a failure. [ 2614.764752] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.767466] CPU: 0 PID: 13247 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2614.769064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.770982] Call Trace: [ 2614.771598] dump_stack+0x107/0x167 [ 2614.772431] should_fail.cold+0x5/0xa [ 2614.773322] ? create_object.isra.0+0x3a/0xa20 [ 2614.774358] should_failslab+0x5/0x20 [ 2614.775218] kmem_cache_alloc+0x5b/0x310 [ 2614.776148] create_object.isra.0+0x3a/0xa20 [ 2614.777184] kmemleak_alloc_percpu+0xa0/0x100 [ 2614.778210] pcpu_alloc+0x4e2/0x1240 [ 2614.779093] __percpu_counter_init+0x10d/0x2d0 [ 2614.780143] io_uring_alloc_task_context+0xcc/0x6a0 [ 2614.781316] ? io_import_iovec+0x1120/0x1120 [ 2614.782355] io_uring_setup+0x1dd1/0x2980 [ 2614.783321] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2614.784496] ? wait_for_completion_io+0x270/0x270 [ 2614.785635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.786841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.788028] do_syscall_64+0x33/0x40 [ 2614.788898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2614.790072] RIP: 0033:0x7f9c3da0ab19 [ 2614.790911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.795187] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2614.796967] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2614.798612] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2614.800275] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2614.801956] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2614.803604] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2614.815590] loop2: detected capacity change from 0 to 26624 [ 2614.818682] FAT-fs (loop2): bogus number of reserved sectors [ 2614.819428] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2614.832651] FAULT_INJECTION: forcing a failure. [ 2614.832651] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.834026] CPU: 1 PID: 13248 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2614.834816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.835769] Call Trace: [ 2614.836082] dump_stack+0x107/0x167 [ 2614.836504] should_fail.cold+0x5/0xa [ 2614.836961] ? create_object.isra.0+0x3a/0xa20 [ 2614.837486] should_failslab+0x5/0x20 [ 2614.837922] kmem_cache_alloc+0x5b/0x310 [ 2614.838390] create_object.isra.0+0x3a/0xa20 [ 2614.838896] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2614.839484] kmem_cache_alloc+0x159/0x310 [ 2614.839962] __alloc_file+0x21/0x320 [ 2614.840388] alloc_empty_file+0x6d/0x170 [ 2614.840859] alloc_file+0x5e/0x5a0 [ 2614.841267] alloc_file_pseudo+0x16a/0x250 [ 2614.841752] ? alloc_file+0x5a0/0x5a0 [ 2614.842196] anon_inode_getfile+0xc8/0x1f0 [ 2614.842687] io_uring_setup+0x138b/0x2980 [ 2614.843165] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2614.843746] ? wait_for_completion_io+0x270/0x270 [ 2614.844307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.844920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.845513] do_syscall_64+0x33/0x40 [ 2614.845940] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2614.846519] RIP: 0033:0x7f838ee79b19 [ 2614.846951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.849070] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2614.849941] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2614.850756] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2614.851576] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2614.852397] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2614.853219] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:09:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x6c00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:09:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 33) 05:09:05 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2614.896574] loop2: detected capacity change from 0 to 27648 [ 2614.902087] FAT-fs (loop2): bogus number of reserved sectors [ 2614.902772] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2614.918388] loop2: detected capacity change from 0 to 27648 05:09:05 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 27) [ 2614.927459] FAT-fs (loop2): bogus number of reserved sectors [ 2614.928341] FAT-fs (loop2): Can't find a valid FAT filesystem 05:09:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xff03) [ 2614.959145] FAULT_INJECTION: forcing a failure. [ 2614.959145] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.960487] CPU: 1 PID: 13265 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2614.961290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.962239] Call Trace: [ 2614.962545] dump_stack+0x107/0x167 [ 2614.962965] should_fail.cold+0x5/0xa [ 2614.963400] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2614.963994] should_failslab+0x5/0x20 [ 2614.964427] kmem_cache_alloc_trace+0x55/0x320 [ 2614.964960] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2614.965538] ? io_import_iovec+0x1120/0x1120 [ 2614.966048] io_uring_setup+0x1dd1/0x2980 [ 2614.966523] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2614.967100] ? wait_for_completion_io+0x270/0x270 [ 2614.967657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.968258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.968863] do_syscall_64+0x33/0x40 [ 2614.969295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2614.969889] RIP: 0033:0x7f9c3da0ab19 [ 2614.970327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.972418] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2614.973288] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2614.974096] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2614.974909] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2614.975720] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2614.976551] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:09:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x7400, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2615.011055] loop2: detected capacity change from 0 to 29696 [ 2615.014406] FAT-fs (loop2): bogus number of reserved sectors [ 2615.015175] FAT-fs (loop2): Can't find a valid FAT filesystem 05:09:06 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 44) [ 2615.097061] FAULT_INJECTION: forcing a failure. [ 2615.097061] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.099681] CPU: 0 PID: 13267 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2615.101282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2615.103083] Call Trace: [ 2615.103672] dump_stack+0x107/0x167 [ 2615.104496] should_fail.cold+0x5/0xa [ 2615.105372] ? find_held_lock+0x2c/0x110 [ 2615.106303] ? create_object.isra.0+0x3a/0xa20 [ 2615.107347] should_failslab+0x5/0x20 [ 2615.108219] kmem_cache_alloc+0x5b/0x310 [ 2615.109175] ? __task_pid_nr_ns+0x16a/0x4f0 [ 2615.110158] create_object.isra.0+0x3a/0xa20 [ 2615.111196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2615.112352] kmem_cache_alloc_trace+0x151/0x320 [ 2615.113428] proc_thread_self_get_link+0x1a8/0x210 [ 2615.114578] ? proc_setup_self+0x390/0x390 [ 2615.115565] step_into+0x1595/0x1ce0 [ 2615.116434] ? lookup_fast+0x6e0/0x6e0 [ 2615.117349] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2615.118399] walk_component+0x171/0x6a0 [ 2615.119327] ? trace_hardirqs_on+0x5b/0x180 [ 2615.120349] ? handle_dots.part.0+0x15c0/0x15c0 [ 2615.121454] ? security_inode_permission+0xcb/0x100 [ 2615.122708] link_path_walk.part.0+0x699/0xbf0 [ 2615.123791] ? walk_component+0x6a0/0x6a0 [ 2615.124755] ? percpu_counter_add_batch+0x8b/0x140 [ 2615.125903] path_openat+0x25d/0x2770 [ 2615.126805] ? path_lookupat+0x860/0x860 [ 2615.127748] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2615.128964] ? lock_acquire+0x197/0x470 [ 2615.129866] ? find_held_lock+0x2c/0x110 [ 2615.130831] do_filp_open+0x190/0x3e0 [ 2615.131694] ? may_open_dev+0xf0/0xf0 [ 2615.132612] ? rwlock_bug.part.0+0x90/0x90 [ 2615.133629] ? _raw_spin_unlock+0x1a/0x30 [ 2615.134586] ? alloc_fd+0x2e7/0x670 [ 2615.135438] do_sys_openat2+0x171/0x4d0 [ 2615.136350] ? security_file_free+0xaa/0xd0 [ 2615.137319] ? build_open_flags+0x6f0/0x6f0 [ 2615.138284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.139460] ? call_rcu+0x435/0x9c0 [ 2615.140292] __x64_sys_openat+0x13f/0x1f0 [ 2615.141267] ? __ia32_sys_open+0x1c0/0x1c0 [ 2615.142279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.143526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2615.144707] do_syscall_64+0x33/0x40 [ 2615.145566] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2615.146734] RIP: 0033:0x7f10a0111a04 [ 2615.147549] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2615.151683] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2615.153395] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2615.155054] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2615.156744] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2615.158413] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2615.160093] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2615.181458] FAULT_INJECTION: forcing a failure. [ 2615.181458] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.183972] CPU: 1 PID: 13275 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2615.185476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2615.187248] Call Trace: [ 2615.187827] dump_stack+0x107/0x167 [ 2615.188629] should_fail.cold+0x5/0xa [ 2615.189467] ? security_file_alloc+0x34/0x170 [ 2615.190445] should_failslab+0x5/0x20 [ 2615.191273] kmem_cache_alloc+0x5b/0x310 [ 2615.192163] security_file_alloc+0x34/0x170 [ 2615.193109] __alloc_file+0xb7/0x320 [ 2615.193916] alloc_empty_file+0x6d/0x170 [ 2615.194806] alloc_file+0x5e/0x5a0 [ 2615.195581] alloc_file_pseudo+0x16a/0x250 [ 2615.196491] ? alloc_file+0x5a0/0x5a0 [ 2615.197346] anon_inode_getfile+0xc8/0x1f0 [ 2615.198272] io_uring_setup+0x138b/0x2980 [ 2615.199183] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2615.200281] ? wait_for_completion_io+0x270/0x270 [ 2615.201373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.202496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2615.203611] do_syscall_64+0x33/0x40 [ 2615.204419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2615.205528] RIP: 0033:0x7f838ee79b19 [ 2615.206346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.210301] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2615.211937] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2615.213481] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2615.215018] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2615.216565] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2615.218088] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:09:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x7a00, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:09:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200004}], 0x7ffff000, 0x0) 05:09:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xe00) 05:09:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x34000) 05:09:21 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:09:21 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 28) 05:09:21 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 45) 05:09:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 34) [ 2630.620357] FAULT_INJECTION: forcing a failure. [ 2630.620357] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.621947] CPU: 1 PID: 13291 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2630.622866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.623971] Call Trace: [ 2630.624330] dump_stack+0x107/0x167 [ 2630.624826] should_fail.cold+0x5/0xa [ 2630.625337] ? create_object.isra.0+0x3a/0xa20 [ 2630.625972] should_failslab+0x5/0x20 [ 2630.626483] kmem_cache_alloc+0x5b/0x310 [ 2630.627039] create_object.isra.0+0x3a/0xa20 [ 2630.627625] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2630.628312] kmem_cache_alloc_trace+0x151/0x320 [ 2630.628957] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2630.629626] ? io_import_iovec+0x1120/0x1120 [ 2630.630220] io_uring_setup+0x1dd1/0x2980 [ 2630.630777] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2630.631453] ? wait_for_completion_io+0x270/0x270 [ 2630.632118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.632820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2630.633530] do_syscall_64+0x33/0x40 [ 2630.634025] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2630.634717] RIP: 0033:0x7f9c3da0ab19 [ 2630.635211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.637694] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2630.638709] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2630.639680] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2630.640650] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2630.641614] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2630.642576] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2630.649710] loop2: detected capacity change from 0 to 31232 05:09:21 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 29) [ 2630.678044] FAULT_INJECTION: forcing a failure. [ 2630.678044] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.679704] CPU: 1 PID: 13295 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2630.680641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.681767] Call Trace: [ 2630.682143] dump_stack+0x107/0x167 [ 2630.682648] should_fail.cold+0x5/0xa [ 2630.683169] ? create_object.isra.0+0x3a/0xa20 [ 2630.683797] should_failslab+0x5/0x20 [ 2630.684316] kmem_cache_alloc+0x5b/0x310 [ 2630.684878] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2630.685633] create_object.isra.0+0x3a/0xa20 [ 2630.686230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2630.686927] kmem_cache_alloc+0x159/0x310 [ 2630.687510] security_file_alloc+0x34/0x170 [ 2630.688105] __alloc_file+0xb7/0x320 [ 2630.688627] alloc_empty_file+0x6d/0x170 [ 2630.689192] alloc_file+0x5e/0x5a0 [ 2630.689693] alloc_file_pseudo+0x16a/0x250 [ 2630.690273] ? alloc_file+0x5a0/0x5a0 [ 2630.690811] anon_inode_getfile+0xc8/0x1f0 [ 2630.691411] io_uring_setup+0x138b/0x2980 [ 2630.691980] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2630.692668] ? wait_for_completion_io+0x270/0x270 [ 2630.693363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.694087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2630.694804] do_syscall_64+0x33/0x40 [ 2630.695322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2630.696029] RIP: 0033:0x7f838ee79b19 [ 2630.696536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.699033] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2630.700076] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2630.701053] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2630.702033] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2630.702996] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2630.703964] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2630.705269] FAT-fs (loop2): bogus number of reserved sectors [ 2630.706763] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2630.741440] FAULT_INJECTION: forcing a failure. [ 2630.741440] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.742919] CPU: 1 PID: 13296 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2630.743809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.744876] Call Trace: [ 2630.745221] dump_stack+0x107/0x167 [ 2630.745698] should_fail.cold+0x5/0xa [ 2630.746194] ? __d_alloc+0x2a/0x990 [ 2630.746675] should_failslab+0x5/0x20 [ 2630.747176] kmem_cache_alloc+0x5b/0x310 [ 2630.747710] __d_alloc+0x2a/0x990 [ 2630.748178] d_alloc_parallel+0x111/0x1bc0 [ 2630.748741] ? __d_lookup+0x396/0x760 [ 2630.749255] ? lock_downgrade+0x6d0/0x6d0 [ 2630.749795] ? find_held_lock+0x2c/0x110 [ 2630.750325] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2630.750860] ? __d_lookup+0x3bf/0x760 [ 2630.751352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.752051] lookup_open.isra.0+0x962/0x1270 [ 2630.752638] ? vfs_tmpfile+0x350/0x350 [ 2630.753174] path_openat+0x972/0x2770 [ 2630.753667] ? path_lookupat+0x860/0x860 [ 2630.754190] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2630.754852] ? lock_acquire+0x197/0x470 [ 2630.755360] ? find_held_lock+0x2c/0x110 [ 2630.755897] do_filp_open+0x190/0x3e0 [ 2630.756384] ? may_open_dev+0xf0/0xf0 [ 2630.756887] ? simple_attr_release+0x50/0x50 [ 2630.757456] ? _raw_spin_unlock+0x1a/0x30 [ 2630.757988] ? alloc_fd+0x2e7/0x670 [ 2630.758456] do_sys_openat2+0x171/0x4d0 [ 2630.758957] ? security_file_free+0xaa/0xd0 [ 2630.759547] ? build_open_flags+0x6f0/0x6f0 [ 2630.760137] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.760835] ? call_rcu+0x435/0x9c0 [ 2630.761333] __x64_sys_openat+0x13f/0x1f0 [ 2630.761884] ? __ia32_sys_open+0x1c0/0x1c0 [ 2630.762451] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.763146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2630.763826] do_syscall_64+0x33/0x40 [ 2630.764312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2630.764977] RIP: 0033:0x7f10a0111a04 [ 2630.765461] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2630.767798] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2630.768779] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2630.769708] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2630.770619] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2630.771540] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2630.772437] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:09:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 35) [ 2630.816841] FAULT_INJECTION: forcing a failure. [ 2630.816841] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.819644] CPU: 0 PID: 13308 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2630.821218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.823092] Call Trace: [ 2630.823691] dump_stack+0x107/0x167 [ 2630.824518] should_fail.cold+0x5/0xa [ 2630.825389] ? io_wq_create+0xeb/0xc00 [ 2630.826277] should_failslab+0x5/0x20 [ 2630.827136] __kmalloc+0x72/0x390 [ 2630.827925] io_wq_create+0xeb/0xc00 [ 2630.828777] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2630.829930] ? io_import_iovec+0x1120/0x1120 [ 2630.830928] ? io_apoll_task_func+0x2d0/0x2d0 [ 2630.831944] ? __io_req_find_next+0x300/0x300 [ 2630.832973] io_uring_setup+0x1dd1/0x2980 [ 2630.833915] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2630.835068] ? wait_for_completion_io+0x270/0x270 [ 2630.836186] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.837376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2630.838541] do_syscall_64+0x33/0x40 [ 2630.839384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2630.840555] RIP: 0033:0x7f9c3da0ab19 [ 2630.841411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.845580] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2630.847307] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2630.848928] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2630.850540] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2630.852154] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2630.853770] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:09:21 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 46) 05:09:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xedc0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:09:21 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2630.892474] FAULT_INJECTION: forcing a failure. [ 2630.892474] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.895002] CPU: 0 PID: 13311 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2630.896572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.898459] Call Trace: [ 2630.899059] dump_stack+0x107/0x167 [ 2630.899896] should_fail.cold+0x5/0xa [ 2630.900775] ? create_object.isra.0+0x3a/0xa20 [ 2630.901825] should_failslab+0x5/0x20 [ 2630.902694] kmem_cache_alloc+0x5b/0x310 [ 2630.903620] create_object.isra.0+0x3a/0xa20 [ 2630.904613] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2630.905769] kmem_cache_alloc+0x159/0x310 [ 2630.906716] __d_alloc+0x2a/0x990 [ 2630.907507] d_alloc_parallel+0x111/0x1bc0 [ 2630.908464] ? __d_lookup+0x396/0x760 [ 2630.909342] ? lock_downgrade+0x6d0/0x6d0 [ 2630.910282] ? find_held_lock+0x2c/0x110 [ 2630.911204] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2630.912135] ? __d_lookup+0x3bf/0x760 [ 2630.913014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.914215] lookup_open.isra.0+0x962/0x1270 [ 2630.915213] ? vfs_tmpfile+0x350/0x350 [ 2630.916127] path_openat+0x972/0x2770 [ 2630.917006] ? path_lookupat+0x860/0x860 [ 2630.917931] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2630.919114] ? lock_acquire+0x197/0x470 [ 2630.920008] ? find_held_lock+0x2c/0x110 [ 2630.920941] do_filp_open+0x190/0x3e0 [ 2630.921799] ? may_open_dev+0xf0/0xf0 [ 2630.922673] ? simple_attr_release+0x50/0x50 [ 2630.923672] ? _raw_spin_unlock+0x1a/0x30 [ 2630.924606] ? alloc_fd+0x2e7/0x670 [ 2630.925442] do_sys_openat2+0x171/0x4d0 [ 2630.926347] ? security_file_free+0xaa/0xd0 [ 2630.927329] ? build_open_flags+0x6f0/0x6f0 [ 2630.928320] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.929515] ? call_rcu+0x435/0x9c0 [ 2630.930344] __x64_sys_openat+0x13f/0x1f0 [ 2630.931284] ? __ia32_sys_open+0x1c0/0x1c0 [ 2630.932254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.933448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2630.934613] do_syscall_64+0x33/0x40 [ 2630.935461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2630.936612] RIP: 0033:0x7f10a0111a04 [ 2630.937462] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2630.941639] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2630.943368] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2630.944993] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2630.946609] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2630.948220] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2630.949851] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2630.958142] FAULT_INJECTION: forcing a failure. [ 2630.958142] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.959577] CPU: 1 PID: 13317 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2630.960388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.961361] Call Trace: [ 2630.961676] dump_stack+0x107/0x167 [ 2630.962196] should_fail.cold+0x5/0xa [ 2630.962651] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2630.963266] should_failslab+0x5/0x20 [ 2630.963710] kmem_cache_alloc_trace+0x55/0x320 [ 2630.964242] io_uring_alloc_task_context+0x99/0x6a0 [ 2630.964823] ? io_import_iovec+0x1120/0x1120 [ 2630.965339] ? lock_downgrade+0x6d0/0x6d0 [ 2630.965815] ? do_raw_spin_lock+0x121/0x260 [ 2630.966316] ? rwlock_bug.part.0+0x90/0x90 [ 2630.966804] __io_uring_add_tctx_node+0x2c6/0x520 [ 2630.967384] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2630.968002] ? alloc_fd+0x2e7/0x670 [ 2630.968430] io_uring_setup+0x1fbb/0x2980 [ 2630.968919] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2630.969507] ? wait_for_completion_io+0x270/0x270 [ 2630.970076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2630.970685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2630.971286] do_syscall_64+0x33/0x40 [ 2630.971714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2630.972305] RIP: 0033:0x7f838ee79b19 [ 2630.972737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.974865] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2630.975743] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2630.976566] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2630.977399] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2630.978221] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2630.979047] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:09:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xf72f, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:09:22 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 30) 05:09:22 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 47) [ 2631.061730] loop2: detected capacity change from 0 to 62976 [ 2631.071059] FAT-fs (loop2): bogus number of reserved sectors [ 2631.071761] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2631.093934] loop2: detected capacity change from 0 to 62976 [ 2631.097502] FAULT_INJECTION: forcing a failure. [ 2631.097502] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.098912] CPU: 1 PID: 13326 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2631.099743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2631.100722] Call Trace: [ 2631.101059] dump_stack+0x107/0x167 [ 2631.101502] should_fail.cold+0x5/0xa [ 2631.101967] ? create_object.isra.0+0x3a/0xa20 [ 2631.102516] should_failslab+0x5/0x20 [ 2631.102980] kmem_cache_alloc+0x5b/0x310 [ 2631.103473] create_object.isra.0+0x3a/0xa20 [ 2631.104001] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2631.104608] kmem_cache_alloc_trace+0x151/0x320 [ 2631.105187] io_uring_alloc_task_context+0x99/0x6a0 [ 2631.105778] ? io_import_iovec+0x1120/0x1120 [ 2631.106306] ? lock_downgrade+0x6d0/0x6d0 [ 2631.106796] ? do_raw_spin_lock+0x121/0x260 [ 2631.107305] ? rwlock_bug.part.0+0x90/0x90 [ 2631.107811] __io_uring_add_tctx_node+0x2c6/0x520 [ 2631.108378] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2631.108998] ? alloc_fd+0x2e7/0x670 [ 2631.109436] io_uring_setup+0x1fbb/0x2980 [ 2631.109923] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2631.110512] ? wait_for_completion_io+0x270/0x270 [ 2631.111098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2631.111716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2631.112318] do_syscall_64+0x33/0x40 [ 2631.112750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2631.113354] RIP: 0033:0x7f838ee79b19 [ 2631.113793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.115935] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2631.116834] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2631.117667] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2631.118505] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2631.119328] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2631.120162] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:09:22 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2631.124116] FAULT_INJECTION: forcing a failure. [ 2631.124116] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.127058] CPU: 0 PID: 13329 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2631.128619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2631.130507] Call Trace: [ 2631.131111] dump_stack+0x107/0x167 [ 2631.131932] should_fail.cold+0x5/0xa [ 2631.132801] ? create_object.isra.0+0x3a/0xa20 [ 2631.133842] should_failslab+0x5/0x20 [ 2631.134709] kmem_cache_alloc+0x5b/0x310 [ 2631.135630] create_object.isra.0+0x3a/0xa20 [ 2631.136740] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2631.137958] __kmalloc+0x16e/0x390 [ 2631.138777] io_wq_create+0xeb/0xc00 [ 2631.139635] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2631.140780] ? io_import_iovec+0x1120/0x1120 [ 2631.141785] ? io_apoll_task_func+0x2d0/0x2d0 [ 2631.142790] ? __io_req_find_next+0x300/0x300 [ 2631.143822] io_uring_setup+0x1dd1/0x2980 [ 2631.144764] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2631.145916] ? wait_for_completion_io+0x270/0x270 [ 2631.147025] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2631.148219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2631.149387] do_syscall_64+0x33/0x40 [ 2631.150230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2631.151388] RIP: 0033:0x7f9c3da0ab19 [ 2631.152231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.156404] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2631.158127] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2631.159739] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2631.161357] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2631.162977] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2631.164584] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2631.167974] FAT-fs (loop2): bogus number of reserved sectors [ 2631.169340] FAT-fs (loop2): Can't find a valid FAT filesystem 05:09:36 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 31) 05:09:36 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 48) 05:09:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 36) 05:09:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200008}], 0x7ffff000, 0x0) 05:09:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xe00) 05:09:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x40000) 05:09:36 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:09:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xfd2f, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2645.878376] loop2: detected capacity change from 0 to 64512 [ 2645.890432] FAT-fs (loop2): bogus number of reserved sectors [ 2645.891813] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2645.915783] loop2: detected capacity change from 0 to 64512 [ 2645.921058] FAT-fs (loop2): bogus number of reserved sectors [ 2645.922467] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2645.928210] FAULT_INJECTION: forcing a failure. [ 2645.928210] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.931195] CPU: 1 PID: 13350 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2645.932898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2645.934941] Call Trace: [ 2645.935592] dump_stack+0x107/0x167 [ 2645.936488] should_fail.cold+0x5/0xa [ 2645.937434] ? create_object.isra.0+0x3a/0xa20 [ 2645.938565] should_failslab+0x5/0x20 [ 2645.939503] kmem_cache_alloc+0x5b/0x310 [ 2645.940507] create_object.isra.0+0x3a/0xa20 [ 2645.941602] kmemleak_alloc_percpu+0xa0/0x100 [ 2645.942718] pcpu_alloc+0x4e2/0x1240 [ 2645.943648] __percpu_counter_init+0x10d/0x2d0 [ 2645.944772] io_uring_alloc_task_context+0xcc/0x6a0 [ 2645.946010] ? io_import_iovec+0x1120/0x1120 [ 2645.947091] ? lock_downgrade+0x6d0/0x6d0 [ 2645.948105] ? do_raw_spin_lock+0x121/0x260 [ 2645.949163] ? rwlock_bug.part.0+0x90/0x90 [ 2645.950191] __io_uring_add_tctx_node+0x2c6/0x520 [ 2645.951360] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2645.952626] ? alloc_fd+0x2e7/0x670 [ 2645.953541] io_uring_setup+0x1fbb/0x2980 [ 2645.954563] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2645.955785] ? wait_for_completion_io+0x270/0x270 [ 2645.956990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2645.958274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.959543] do_syscall_64+0x33/0x40 [ 2645.960455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2645.961732] RIP: 0033:0x7f838ee79b19 [ 2645.962633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.967120] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2645.968990] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2645.970736] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2645.972482] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2645.974244] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2645.975986] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2645.989645] FAULT_INJECTION: forcing a failure. [ 2645.989645] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.992128] CPU: 0 PID: 13359 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2645.993648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2645.995447] Call Trace: [ 2645.996020] dump_stack+0x107/0x167 [ 2645.996809] should_fail.cold+0x5/0xa [ 2645.997646] ? io_wq_create+0x6ef/0xc00 [ 2645.998521] should_failslab+0x5/0x20 [ 2645.999352] kmem_cache_alloc_node_trace+0x59/0x340 [ 2646.000447] io_wq_create+0x6ef/0xc00 [ 2646.001300] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2646.002403] ? io_import_iovec+0x1120/0x1120 [ 2646.003360] ? io_apoll_task_func+0x2d0/0x2d0 [ 2646.004323] ? __io_req_find_next+0x300/0x300 [ 2646.005301] io_uring_setup+0x1dd1/0x2980 [ 2646.006200] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2646.007280] ? wait_for_completion_io+0x270/0x270 [ 2646.008334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.009465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.010573] do_syscall_64+0x33/0x40 [ 2646.011372] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.012473] RIP: 0033:0x7f9c3da0ab19 [ 2646.013279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2646.017246] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2646.018876] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2646.020404] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2646.021938] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2646.023467] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2646.025011] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2646.030132] FAULT_INJECTION: forcing a failure. [ 2646.030132] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.032667] CPU: 0 PID: 13358 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2646.034157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.035915] Call Trace: [ 2646.036474] dump_stack+0x107/0x167 [ 2646.037257] should_fail.cold+0x5/0xa [ 2646.038067] ? proc_alloc_inode+0x18/0x200 [ 2646.038968] should_failslab+0x5/0x20 [ 2646.039775] kmem_cache_alloc+0x5b/0x310 [ 2646.040647] ? proc_free_inode+0x20/0x20 [ 2646.041518] proc_alloc_inode+0x18/0x200 [ 2646.042376] ? proc_free_inode+0x20/0x20 [ 2646.043232] alloc_inode+0x63/0x240 [ 2646.044001] new_inode+0x23/0x250 [ 2646.044738] proc_get_inode+0x1e/0x7e0 [ 2646.045570] proc_lookup_de+0x13a/0x220 [ 2646.046416] proc_tgid_net_lookup+0x70/0x100 [ 2646.047351] lookup_open.isra.0+0x79f/0x1270 [ 2646.048287] ? vfs_tmpfile+0x350/0x350 [ 2646.049158] path_openat+0x972/0x2770 [ 2646.049980] ? path_lookupat+0x860/0x860 [ 2646.050838] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2646.051936] ? lock_acquire+0x197/0x470 [ 2646.052768] ? find_held_lock+0x2c/0x110 [ 2646.053647] do_filp_open+0x190/0x3e0 [ 2646.054448] ? may_open_dev+0xf0/0xf0 [ 2646.055262] ? simple_attr_release+0x50/0x50 [ 2646.056197] ? _raw_spin_unlock+0x1a/0x30 [ 2646.057071] ? alloc_fd+0x2e7/0x670 [ 2646.057846] do_sys_openat2+0x171/0x4d0 [ 2646.058679] ? security_file_free+0xaa/0xd0 [ 2646.059582] ? build_open_flags+0x6f0/0x6f0 [ 2646.060496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.061611] ? call_rcu+0x435/0x9c0 [ 2646.062378] __x64_sys_openat+0x13f/0x1f0 [ 2646.063247] ? __ia32_sys_open+0x1c0/0x1c0 [ 2646.064141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.065264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.066349] do_syscall_64+0x33/0x40 [ 2646.067145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.068225] RIP: 0033:0x7f10a0111a04 [ 2646.069029] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2646.072937] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2646.074562] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2646.076073] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2646.077599] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2646.079107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2646.080621] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:09:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xff0f, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:09:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 37) 05:09:37 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 32) 05:09:37 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:09:37 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 49) [ 2646.230482] loop2: detected capacity change from 0 to 65024 [ 2646.233094] FAULT_INJECTION: forcing a failure. [ 2646.233094] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.233628] FAULT_INJECTION: forcing a failure. [ 2646.233628] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.235415] CPU: 0 PID: 13370 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2646.235424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.235430] Call Trace: [ 2646.235452] dump_stack+0x107/0x167 [ 2646.235470] should_fail.cold+0x5/0xa [ 2646.235489] ? create_object.isra.0+0x3a/0xa20 [ 2646.235508] should_failslab+0x5/0x20 [ 2646.235523] kmem_cache_alloc+0x5b/0x310 [ 2646.235544] create_object.isra.0+0x3a/0xa20 [ 2646.235557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2646.235587] kmem_cache_alloc+0x159/0x310 [ 2646.247942] ? proc_free_inode+0x20/0x20 [ 2646.248731] proc_alloc_inode+0x18/0x200 [ 2646.249522] ? proc_free_inode+0x20/0x20 [ 2646.250304] alloc_inode+0x63/0x240 [ 2646.251009] new_inode+0x23/0x250 [ 2646.251678] proc_get_inode+0x1e/0x7e0 [ 2646.252423] proc_lookup_de+0x13a/0x220 [ 2646.253194] proc_tgid_net_lookup+0x70/0x100 [ 2646.254044] lookup_open.isra.0+0x79f/0x1270 [ 2646.254888] ? vfs_tmpfile+0x350/0x350 [ 2646.255656] path_openat+0x972/0x2770 [ 2646.256386] ? path_lookupat+0x860/0x860 [ 2646.257174] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2646.258169] ? lock_acquire+0x197/0x470 [ 2646.258924] ? find_held_lock+0x2c/0x110 [ 2646.259702] do_filp_open+0x190/0x3e0 [ 2646.260421] ? may_open_dev+0xf0/0xf0 [ 2646.261166] ? simple_attr_release+0x50/0x50 [ 2646.262018] ? _raw_spin_unlock+0x1a/0x30 [ 2646.262802] ? alloc_fd+0x2e7/0x670 [ 2646.263507] do_sys_openat2+0x171/0x4d0 [ 2646.264264] ? security_file_free+0xaa/0xd0 [ 2646.265091] ? build_open_flags+0x6f0/0x6f0 [ 2646.265920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.266919] ? call_rcu+0x435/0x9c0 [ 2646.267622] __x64_sys_openat+0x13f/0x1f0 [ 2646.268409] ? __ia32_sys_open+0x1c0/0x1c0 [ 2646.269233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.270227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.271204] do_syscall_64+0x33/0x40 [ 2646.271900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.272861] RIP: 0033:0x7f10a0111a04 [ 2646.273570] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2646.277056] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2646.278489] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2646.279842] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2646.281196] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2646.282549] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2646.283890] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2646.285273] CPU: 1 PID: 13369 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2646.286799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.288617] Call Trace: [ 2646.289209] dump_stack+0x107/0x167 [ 2646.290006] should_fail.cold+0x5/0xa [ 2646.290844] ? create_object.isra.0+0x3a/0xa20 [ 2646.291834] should_failslab+0x5/0x20 [ 2646.292657] kmem_cache_alloc+0x5b/0x310 [ 2646.293547] ? io_wq_create+0x114/0xc00 [ 2646.294414] create_object.isra.0+0x3a/0xa20 [ 2646.295365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2646.296472] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2646.297586] io_wq_create+0x6ef/0xc00 [ 2646.298437] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2646.299541] ? io_import_iovec+0x1120/0x1120 [ 2646.300495] ? io_apoll_task_func+0x2d0/0x2d0 [ 2646.301475] ? __io_req_find_next+0x300/0x300 [ 2646.302461] io_uring_setup+0x1dd1/0x2980 [ 2646.303366] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2646.304485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.305630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.306751] do_syscall_64+0x33/0x40 [ 2646.307560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.308676] RIP: 0033:0x7f9c3da0ab19 [ 2646.309479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2646.313430] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2646.315063] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2646.316597] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2646.318133] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2646.319657] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2646.321194] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2646.374518] FAT-fs (loop2): bogus number of reserved sectors [ 2646.376191] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2646.385477] FAULT_INJECTION: forcing a failure. [ 2646.385477] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.387720] CPU: 0 PID: 13374 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2646.389039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.390490] Call Trace: [ 2646.390959] dump_stack+0x107/0x167 [ 2646.391599] should_fail.cold+0x5/0xa [ 2646.392271] ? create_object.isra.0+0x3a/0xa20 [ 2646.393095] should_failslab+0x5/0x20 [ 2646.393764] kmem_cache_alloc+0x5b/0x310 [ 2646.394478] create_object.isra.0+0x3a/0xa20 [ 2646.395249] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2646.396137] kmem_cache_alloc_trace+0x151/0x320 [ 2646.396978] io_uring_alloc_task_context+0x99/0x6a0 [ 2646.397865] ? io_import_iovec+0x1120/0x1120 [ 2646.398632] ? lock_downgrade+0x6d0/0x6d0 [ 2646.399352] ? do_raw_spin_lock+0x121/0x260 [ 2646.400109] ? rwlock_bug.part.0+0x90/0x90 [ 2646.400858] __io_uring_add_tctx_node+0x2c6/0x520 [ 2646.401711] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2646.402623] ? alloc_fd+0x2e7/0x670 [ 2646.403270] io_uring_setup+0x1fbb/0x2980 [ 2646.404003] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2646.404887] ? wait_for_completion_io+0x270/0x270 [ 2646.405760] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.406682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.407591] do_syscall_64+0x33/0x40 [ 2646.408242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.409136] RIP: 0033:0x7f838ee79b19 [ 2646.409784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2646.412956] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2646.414279] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2646.415520] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2646.416767] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2646.418006] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2646.419242] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:09:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 38) 05:09:37 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 33) 05:09:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4271f, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2646.534235] FAULT_INJECTION: forcing a failure. [ 2646.534235] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.536123] CPU: 0 PID: 13379 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2646.537235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.538571] Call Trace: [ 2646.538999] dump_stack+0x107/0x167 [ 2646.539595] should_fail.cold+0x5/0xa [ 2646.540219] ? security_inode_alloc+0x34/0x160 [ 2646.540947] should_failslab+0x5/0x20 [ 2646.541567] kmem_cache_alloc+0x5b/0x310 [ 2646.542225] security_inode_alloc+0x34/0x160 [ 2646.542940] inode_init_always+0xa4e/0xd10 [ 2646.543616] ? proc_free_inode+0x20/0x20 [ 2646.544282] alloc_inode+0x84/0x240 [ 2646.544858] new_inode+0x23/0x250 [ 2646.545425] proc_get_inode+0x1e/0x7e0 [ 2646.546047] proc_lookup_de+0x13a/0x220 [ 2646.546687] proc_tgid_net_lookup+0x70/0x100 [ 2646.547391] lookup_open.isra.0+0x79f/0x1270 [ 2646.548102] ? vfs_tmpfile+0x350/0x350 [ 2646.548745] path_openat+0x972/0x2770 [ 2646.549377] ? path_lookupat+0x860/0x860 [ 2646.550019] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2646.550839] ? lock_acquire+0x197/0x470 [ 2646.551480] ? find_held_lock+0x2c/0x110 [ 2646.552131] do_filp_open+0x190/0x3e0 [ 2646.552720] ? may_open_dev+0xf0/0xf0 [ 2646.553358] ? simple_attr_release+0x50/0x50 [ 2646.554068] ? _raw_spin_unlock+0x1a/0x30 [ 2646.554732] ? alloc_fd+0x2e7/0x670 [ 2646.555323] do_sys_openat2+0x171/0x4d0 [ 2646.555939] ? security_file_free+0xaa/0xd0 [ 2646.556629] ? build_open_flags+0x6f0/0x6f0 [ 2646.557337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.558162] ? call_rcu+0x435/0x9c0 [ 2646.558755] __x64_sys_openat+0x13f/0x1f0 [ 2646.559420] ? __ia32_sys_open+0x1c0/0x1c0 [ 2646.560094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.560928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.561761] do_syscall_64+0x33/0x40 [ 2646.562353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.563158] RIP: 0033:0x7f10a0111a04 [ 2646.563736] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2646.566620] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2646.567817] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2646.568921] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2646.570051] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2646.571184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2646.572311] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2646.612325] FAULT_INJECTION: forcing a failure. [ 2646.612325] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.614055] CPU: 0 PID: 13383 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2646.615070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.616286] Call Trace: [ 2646.616677] dump_stack+0x107/0x167 [ 2646.617223] should_fail.cold+0x5/0xa 05:09:37 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2646.617782] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2646.618830] should_failslab+0x5/0x20 [ 2646.619398] kmem_cache_alloc_trace+0x55/0x320 [ 2646.620090] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2646.620891] io_uring_setup+0x14f6/0x2980 [ 2646.621518] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2646.622259] ? wait_for_completion_io+0x270/0x270 [ 2646.622993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.623766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.624527] do_syscall_64+0x33/0x40 [ 2646.625085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.625829] RIP: 0033:0x7f9c3da0ab19 [ 2646.626387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2646.629054] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2646.630158] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2646.631190] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2646.632230] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2646.633266] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2646.634304] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:09:37 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 50) 05:09:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x42720, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2646.681415] loop2: detected capacity change from 0 to 271872 [ 2646.690402] FAT-fs (loop2): bogus number of reserved sectors [ 2646.691294] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2646.715431] loop2: detected capacity change from 0 to 271872 [ 2646.751520] FAT-fs (loop2): bogus number of reserved sectors [ 2646.752873] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2646.773730] FAULT_INJECTION: forcing a failure. [ 2646.773730] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.776027] CPU: 1 PID: 13391 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2646.777439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.779104] Call Trace: [ 2646.779650] dump_stack+0x107/0x167 [ 2646.780394] should_fail.cold+0x5/0xa [ 2646.781177] ? io_wq_create+0xeb/0xc00 [ 2646.781962] should_failslab+0x5/0x20 [ 2646.782727] __kmalloc+0x72/0x390 [ 2646.783434] io_wq_create+0xeb/0xc00 [ 2646.784203] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2646.785233] ? io_import_iovec+0x1120/0x1120 [ 2646.786112] ? io_apoll_task_func+0x2d0/0x2d0 [ 2646.787018] ? __io_req_find_next+0x300/0x300 [ 2646.787912] ? do_raw_spin_lock+0x121/0x260 [ 2646.788784] ? rwlock_bug.part.0+0x90/0x90 [ 2646.789654] __io_uring_add_tctx_node+0x2c6/0x520 [ 2646.790626] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2646.791669] ? alloc_fd+0x2e7/0x670 [ 2646.792413] io_uring_setup+0x1fbb/0x2980 [ 2646.793269] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2646.794288] ? wait_for_completion_io+0x270/0x270 [ 2646.795282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.796346] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.797396] do_syscall_64+0x33/0x40 [ 2646.798150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.799178] RIP: 0033:0x7f838ee79b19 [ 2646.799931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2646.803650] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2646.805203] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2646.806645] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2646.808082] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2646.809531] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2646.810963] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2659.890142] FAULT_INJECTION: forcing a failure. [ 2659.890142] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.893627] CPU: 1 PID: 13406 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2659.895559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2659.896869] loop2: detected capacity change from 0 to 271872 [ 2659.897917] Call Trace: [ 2659.897954] dump_stack+0x107/0x167 [ 2659.897983] should_fail.cold+0x5/0xa [ 2659.902024] ? create_object.isra.0+0x3a/0xa20 [ 2659.903284] should_failslab+0x5/0x20 [ 2659.904330] kmem_cache_alloc+0x5b/0x310 [ 2659.905454] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 2659.906889] create_object.isra.0+0x3a/0xa20 [ 2659.908371] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2659.909785] __kmalloc+0x16e/0x390 [ 2659.910982] io_wq_create+0xeb/0xc00 [ 2659.912099] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2659.913826] ? io_import_iovec+0x1120/0x1120 [ 2659.913941] FAT-fs (loop2): bogus number of reserved sectors [ 2659.915037] ? io_apoll_task_func+0x2d0/0x2d0 [ 2659.915059] ? __io_req_find_next+0x300/0x300 [ 2659.915087] ? do_raw_spin_lock+0x121/0x260 [ 2659.916418] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2659.917637] ? rwlock_bug.part.0+0x90/0x90 [ 2659.917669] __io_uring_add_tctx_node+0x2c6/0x520 [ 2659.924044] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2659.925510] ? alloc_fd+0x2e7/0x670 [ 2659.926514] io_uring_setup+0x1fbb/0x2980 [ 2659.927664] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2659.929027] ? wait_for_completion_io+0x270/0x270 [ 2659.930113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2659.931192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.932292] do_syscall_64+0x33/0x40 [ 2659.933071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2659.934154] RIP: 0033:0x7f838ee79b19 [ 2659.934948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2659.938827] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2659.940427] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2659.941918] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2659.943384] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2659.944855] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2659.946333] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2659.963771] loop2: detected capacity change from 0 to 271872 05:09:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 39) 05:09:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x80000) 05:09:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200009}], 0x7ffff000, 0x0) 05:09:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x42737, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:09:50 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 34) 05:09:50 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 51) 05:09:50 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:09:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xe00) [ 2659.977823] FAULT_INJECTION: forcing a failure. [ 2659.977823] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.978268] FAT-fs (loop2): bogus number of reserved sectors [ 2659.980617] CPU: 1 PID: 13422 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2659.980637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2659.982010] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2659.983597] Call Trace: [ 2659.983624] dump_stack+0x107/0x167 [ 2659.983648] should_fail.cold+0x5/0xa [ 2659.989259] ? create_object.isra.0+0x3a/0xa20 [ 2659.990356] should_failslab+0x5/0x20 [ 2659.991261] kmem_cache_alloc+0x5b/0x310 [ 2659.992236] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2659.993468] ? trace_hardirqs_on+0x5b/0x180 [ 2659.994522] create_object.isra.0+0x3a/0xa20 [ 2659.995571] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2659.996780] kmem_cache_alloc_trace+0x151/0x320 [ 2659.997899] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2659.999175] io_uring_setup+0x14f6/0x2980 [ 2660.000175] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2660.001352] ? wait_for_completion_io+0x270/0x270 [ 2660.002511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.003712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2660.004944] do_syscall_64+0x33/0x40 [ 2660.005840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2660.007059] RIP: 0033:0x7f9c3da0ab19 [ 2660.007945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2660.012326] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2660.014198] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2660.015907] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2660.017592] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2660.019305] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2660.021002] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2660.036355] FAULT_INJECTION: forcing a failure. [ 2660.036355] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.038999] CPU: 1 PID: 13424 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2660.040600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2660.042557] Call Trace: [ 2660.043170] dump_stack+0x107/0x167 [ 2660.044021] should_fail.cold+0x5/0xa [ 2660.044924] ? create_object.isra.0+0x3a/0xa20 [ 2660.046029] should_failslab+0x5/0x20 [ 2660.046958] kmem_cache_alloc+0x5b/0x310 [ 2660.047886] create_object.isra.0+0x3a/0xa20 [ 2660.049106] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2660.050347] kmem_cache_alloc+0x159/0x310 [ 2660.051417] security_inode_alloc+0x34/0x160 [ 2660.052419] inode_init_always+0xa4e/0xd10 [ 2660.053402] ? proc_free_inode+0x20/0x20 [ 2660.054334] alloc_inode+0x84/0x240 [ 2660.055162] new_inode+0x23/0x250 [ 2660.055969] proc_get_inode+0x1e/0x7e0 [ 2660.056857] proc_lookup_de+0x13a/0x220 [ 2660.057786] proc_tgid_net_lookup+0x70/0x100 [ 2660.058799] lookup_open.isra.0+0x79f/0x1270 [ 2660.059826] ? vfs_tmpfile+0x350/0x350 [ 2660.060759] path_openat+0x972/0x2770 [ 2660.061655] ? path_lookupat+0x860/0x860 [ 2660.062582] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2660.063769] ? lock_acquire+0x197/0x470 [ 2660.064666] ? find_held_lock+0x2c/0x110 [ 2660.065611] do_filp_open+0x190/0x3e0 [ 2660.066473] ? may_open_dev+0xf0/0xf0 [ 2660.067358] ? simple_attr_release+0x50/0x50 [ 2660.068371] ? _raw_spin_unlock+0x1a/0x30 [ 2660.069323] ? alloc_fd+0x2e7/0x670 [ 2660.070161] do_sys_openat2+0x171/0x4d0 [ 2660.071062] ? security_file_free+0xaa/0xd0 [ 2660.072033] ? build_open_flags+0x6f0/0x6f0 [ 2660.073006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.074198] ? call_rcu+0x435/0x9c0 [ 2660.075030] __x64_sys_openat+0x13f/0x1f0 [ 2660.075977] ? __ia32_sys_open+0x1c0/0x1c0 [ 2660.076950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.078173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2660.079352] do_syscall_64+0x33/0x40 [ 2660.080226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2660.081520] RIP: 0033:0x7f10a0111a04 [ 2660.082375] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2660.086445] RSP: 002b:00007f109d6b3060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2660.088195] RAX: ffffffffffffffda RBX: 00007f10a0272020 RCX: 00007f10a0111a04 [ 2660.089818] RDX: 0000000000000000 RSI: 00007f109d6b30f0 RDI: 00000000ffffff9c [ 2660.091404] RBP: 00007f109d6b30f0 R08: 0000000000000000 R09: 00007f109d6b2f70 [ 2660.092991] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2660.094630] R13: 00007ffef8f5f4df R14: 00007f109d6b3300 R15: 0000000000022000 05:09:51 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 35) 05:09:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x80000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:09:51 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2660.200400] FAULT_INJECTION: forcing a failure. [ 2660.200400] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.203629] CPU: 0 PID: 13429 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2660.205186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2660.207047] Call Trace: [ 2660.207645] dump_stack+0x107/0x167 [ 2660.208462] should_fail.cold+0x5/0xa [ 2660.209313] ? create_object.isra.0+0x3a/0xa20 [ 2660.210347] should_failslab+0x5/0x20 [ 2660.211191] kmem_cache_alloc+0x5b/0x310 [ 2660.212113] create_object.isra.0+0x3a/0xa20 [ 2660.213120] kmemleak_alloc_percpu+0xa0/0x100 [ 2660.214098] pcpu_alloc+0x4e2/0x1240 [ 2660.214933] ? io_async_queue_proc+0x80/0x80 [ 2660.215901] percpu_ref_init+0x31/0x3d0 [ 2660.216776] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2660.217986] io_uring_setup+0x14f6/0x2980 [ 2660.218917] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2660.220037] ? wait_for_completion_io+0x270/0x270 [ 2660.221134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.222308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2660.223447] do_syscall_64+0x33/0x40 [ 2660.224282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2660.225423] RIP: 0033:0x7f9c3da0ab19 [ 2660.226266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2660.230373] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2660.232059] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2660.233661] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2660.235255] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2660.236843] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2660.238438] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2660.254180] loop2: detected capacity change from 0 to 524288 [ 2660.260498] FAT-fs (loop2): bogus number of reserved sectors [ 2660.261922] FAT-fs (loop2): Can't find a valid FAT filesystem 05:09:51 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 52) 05:09:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xe0000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:09:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 40) 05:09:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200004}], 0x7ffff000, 0x0) [ 2660.469297] loop2: detected capacity change from 0 to 917504 [ 2660.476252] FAULT_INJECTION: forcing a failure. [ 2660.476252] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.478872] CPU: 0 PID: 13437 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2660.480423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2660.482293] Call Trace: [ 2660.482888] dump_stack+0x107/0x167 [ 2660.483704] should_fail.cold+0x5/0xa [ 2660.484559] ? io_wq_create+0x6ef/0xc00 [ 2660.485460] should_failslab+0x5/0x20 [ 2660.486318] kmem_cache_alloc_node_trace+0x59/0x340 [ 2660.487444] io_wq_create+0x6ef/0xc00 [ 2660.488307] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2660.489446] ? io_import_iovec+0x1120/0x1120 [ 2660.490445] ? io_apoll_task_func+0x2d0/0x2d0 [ 2660.491451] ? __io_req_find_next+0x300/0x300 [ 2660.492462] ? do_raw_spin_lock+0x121/0x260 [ 2660.493437] ? rwlock_bug.part.0+0x90/0x90 [ 2660.494390] __io_uring_add_tctx_node+0x2c6/0x520 [ 2660.495471] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2660.496652] ? alloc_fd+0x2e7/0x670 [ 2660.497498] io_uring_setup+0x1fbb/0x2980 [ 2660.498438] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2660.499569] ? wait_for_completion_io+0x270/0x270 [ 2660.500676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.501863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2660.503035] do_syscall_64+0x33/0x40 [ 2660.503870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2660.505034] RIP: 0033:0x7f838ee79b19 [ 2660.505881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2660.510077] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2660.511804] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2660.513425] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2660.515040] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2660.516651] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2660.518291] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2660.523196] FAT-fs (loop2): bogus number of reserved sectors [ 2660.524597] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2660.535262] FAULT_INJECTION: forcing a failure. [ 2660.535262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2660.538068] CPU: 1 PID: 13444 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2660.539642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2660.541542] Call Trace: [ 2660.542154] dump_stack+0x107/0x167 [ 2660.542988] should_fail.cold+0x5/0xa [ 2660.543880] __alloc_pages_nodemask+0x182/0x600 [ 2660.544936] ? lock_acquire+0x197/0x470 [ 2660.545864] ? lockref_get+0x11/0x50 [ 2660.546714] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2660.548100] ? lock_downgrade+0x6d0/0x6d0 [ 2660.549054] ? do_raw_spin_lock+0x121/0x260 [ 2660.550052] ? rwlock_bug.part.0+0x90/0x90 [ 2660.551014] alloc_pages_current+0x187/0x280 [ 2660.552034] __get_free_pages+0xc/0xa0 [ 2660.552922] inode_doinit_with_dentry+0x8f1/0x1240 [ 2660.554052] ? __mod_timer+0xc87/0xd10 [ 2660.554922] ? trace_seq_path+0x140/0x2f0 [ 2660.555862] ? selinux_file_lock+0x280/0x280 [ 2660.556869] ? current_time+0x1e6/0x2c0 [ 2660.557779] selinux_d_instantiate+0x23/0x30 [ 2660.558773] security_d_instantiate+0x56/0xe0 [ 2660.559799] d_splice_alias+0x8c/0xc60 [ 2660.560686] proc_lookup_de+0x17d/0x220 [ 2660.561616] proc_tgid_net_lookup+0x70/0x100 [ 2660.562607] lookup_open.isra.0+0x79f/0x1270 [ 2660.563603] ? vfs_tmpfile+0x350/0x350 [ 2660.564520] path_openat+0x972/0x2770 [ 2660.565393] ? path_lookupat+0x860/0x860 [ 2660.566315] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2660.567476] ? lock_acquire+0x197/0x470 [ 2660.568378] ? find_held_lock+0x2c/0x110 [ 2660.569316] do_filp_open+0x190/0x3e0 [ 2660.570174] ? may_open_dev+0xf0/0xf0 [ 2660.571073] ? simple_attr_release+0x50/0x50 [ 2660.572114] ? _raw_spin_unlock+0x1a/0x30 [ 2660.573061] ? alloc_fd+0x2e7/0x670 [ 2660.573915] do_sys_openat2+0x171/0x4d0 [ 2660.574809] ? security_file_free+0xaa/0xd0 [ 2660.575795] ? build_open_flags+0x6f0/0x6f0 [ 2660.576784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.577980] ? call_rcu+0x435/0x9c0 [ 2660.578826] __x64_sys_openat+0x13f/0x1f0 [ 2660.579761] ? __ia32_sys_open+0x1c0/0x1c0 [ 2660.580724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.581916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2660.583087] do_syscall_64+0x33/0x40 [ 2660.583924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2660.585087] RIP: 0033:0x7f10a0111a04 [ 2660.585949] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2660.590127] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2660.591830] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2660.593461] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2660.595075] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2660.596685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2660.598319] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2660.628569] loop2: detected capacity change from 0 to 917504 [ 2660.650703] FAT-fs (loop2): bogus number of reserved sectors [ 2660.652139] FAT-fs (loop2): Can't find a valid FAT filesystem 05:10:04 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:10:04 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 53) 05:10:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x34000) 05:10:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x20000e}], 0x7ffff000, 0x0) 05:10:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:10:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 41) 05:10:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x200000) 05:10:04 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 36) [ 2673.907490] loop2: detected capacity change from 0 to 4194304 [ 2673.908358] FAULT_INJECTION: forcing a failure. [ 2673.908358] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.911150] CPU: 0 PID: 13461 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2673.912825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.913339] FAT-fs (loop2): bogus number of reserved sectors [ 2673.914838] Call Trace: [ 2673.914864] dump_stack+0x107/0x167 [ 2673.914886] should_fail.cold+0x5/0xa [ 2673.914908] ? create_object.isra.0+0x3a/0xa20 [ 2673.915551] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2673.916180] should_failslab+0x5/0x20 [ 2673.916199] kmem_cache_alloc+0x5b/0x310 [ 2673.916224] create_object.isra.0+0x3a/0xa20 [ 2673.922914] kmemleak_alloc_percpu+0xa0/0x100 [ 2673.924002] pcpu_alloc+0x4e2/0x1240 [ 2673.924919] ? io_async_queue_proc+0x80/0x80 [ 2673.925989] percpu_ref_init+0x31/0x3d0 [ 2673.926952] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2673.928262] io_uring_setup+0x14f6/0x2980 [ 2673.929296] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2673.930514] ? wait_for_completion_io+0x270/0x270 [ 2673.931712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2673.932975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.934247] do_syscall_64+0x33/0x40 [ 2673.935156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2673.936415] RIP: 0033:0x7f9c3da0ab19 [ 2673.937334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.941841] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2673.943690] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2673.945447] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2673.947187] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2673.948929] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2673.950668] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2673.962607] FAULT_INJECTION: forcing a failure. [ 2673.962607] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.963964] CPU: 1 PID: 13473 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2673.964762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.965723] Call Trace: [ 2673.966028] dump_stack+0x107/0x167 [ 2673.966441] should_fail.cold+0x5/0xa [ 2673.966887] ? create_object.isra.0+0x3a/0xa20 [ 2673.967405] should_failslab+0x5/0x20 [ 2673.967854] kmem_cache_alloc+0x5b/0x310 [ 2673.968320] ? io_wq_create+0x114/0xc00 [ 2673.968780] create_object.isra.0+0x3a/0xa20 [ 2673.969284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2673.969878] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2673.970458] io_wq_create+0x6ef/0xc00 [ 2673.970908] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2673.971475] ? io_import_iovec+0x1120/0x1120 [ 2673.971989] ? io_apoll_task_func+0x2d0/0x2d0 [ 2673.972498] ? __io_req_find_next+0x300/0x300 [ 2673.973031] ? do_raw_spin_lock+0x121/0x260 [ 2673.973527] ? rwlock_bug.part.0+0x90/0x90 [ 2673.974031] __io_uring_add_tctx_node+0x2c6/0x520 [ 2673.974574] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2673.975222] ? alloc_fd+0x2e7/0x670 [ 2673.975644] io_uring_setup+0x1fbb/0x2980 [ 2673.976136] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2673.976717] ? wait_for_completion_io+0x270/0x270 [ 2673.977291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2673.977897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.978485] do_syscall_64+0x33/0x40 [ 2673.978912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2673.979499] RIP: 0033:0x7f838ee79b19 [ 2673.979931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.982055] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2673.982975] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2673.983819] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2673.984741] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2673.985571] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2673.986393] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2673.989716] loop2: detected capacity change from 0 to 4194304 [ 2673.992584] FAT-fs (loop2): bogus number of reserved sectors [ 2673.993572] FAT-fs (loop2): Can't find a valid FAT filesystem 05:10:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xe0ffff, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2674.058201] FAULT_INJECTION: forcing a failure. [ 2674.058201] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.059588] CPU: 1 PID: 13477 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2674.060393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.061400] Call Trace: [ 2674.061721] dump_stack+0x107/0x167 [ 2674.062136] should_fail.cold+0x5/0xa [ 2674.062569] ? proc_reg_open+0x1f1/0x5d0 [ 2674.063046] should_failslab+0x5/0x20 [ 2674.063478] kmem_cache_alloc+0x5b/0x310 [ 2674.063954] proc_reg_open+0x1f1/0x5d0 [ 2674.064397] do_dentry_open+0x4b7/0x1090 [ 2674.064868] ? proc_reg_read+0x300/0x300 [ 2674.065344] ? may_open+0x1e4/0x400 [ 2674.065768] path_openat+0x19ba/0x2770 [ 2674.066215] ? path_lookupat+0x860/0x860 [ 2674.066690] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2674.067291] ? lock_acquire+0x197/0x470 [ 2674.067752] ? find_held_lock+0x2c/0x110 [ 2674.068217] do_filp_open+0x190/0x3e0 [ 2674.068647] ? may_open_dev+0xf0/0xf0 [ 2674.069089] ? simple_attr_release+0x50/0x50 [ 2674.069606] ? _raw_spin_unlock+0x1a/0x30 [ 2674.070092] ? alloc_fd+0x2e7/0x670 [ 2674.070511] do_sys_openat2+0x171/0x4d0 [ 2674.070971] ? security_file_free+0xaa/0xd0 [ 2674.071461] ? build_open_flags+0x6f0/0x6f0 [ 2674.071963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.072560] ? call_rcu+0x435/0x9c0 [ 2674.072983] __x64_sys_openat+0x13f/0x1f0 [ 2674.073457] ? __ia32_sys_open+0x1c0/0x1c0 [ 2674.073956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.074549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.075150] do_syscall_64+0x33/0x40 [ 2674.075574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.076162] RIP: 0033:0x7f10a0111a04 [ 2674.076582] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2674.078710] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2674.079574] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2674.080394] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2674.081213] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2674.082039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2674.082857] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:10:05 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:10:05 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 37) [ 2674.118445] FAULT_INJECTION: forcing a failure. [ 2674.118445] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.119814] CPU: 1 PID: 13483 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2674.120601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.121560] Call Trace: [ 2674.121870] dump_stack+0x107/0x167 [ 2674.122292] should_fail.cold+0x5/0xa [ 2674.122740] ? percpu_ref_init+0xd8/0x3d0 [ 2674.123141] loop2: detected capacity change from 0 to 14745088 [ 2674.123212] should_failslab+0x5/0x20 [ 2674.123231] kmem_cache_alloc_trace+0x55/0x320 [ 2674.125643] ? io_async_queue_proc+0x80/0x80 [ 2674.126157] percpu_ref_init+0xd8/0x3d0 [ 2674.126609] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2674.127252] io_uring_setup+0x14f6/0x2980 [ 2674.127737] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2674.128320] ? wait_for_completion_io+0x270/0x270 [ 2674.128882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.129498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.130102] do_syscall_64+0x33/0x40 [ 2674.130524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.131125] RIP: 0033:0x7f9c3da0ab19 [ 2674.131550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.133685] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.134559] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2674.135386] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2674.136206] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2674.137030] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2674.137863] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2674.156470] FAT-fs (loop2): bogus number of reserved sectors [ 2674.157200] FAT-fs (loop2): Can't find a valid FAT filesystem 05:10:05 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 54) [ 2674.178571] loop2: detected capacity change from 0 to 14745088 [ 2674.183213] FAT-fs (loop2): bogus number of reserved sectors [ 2674.184031] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2674.200671] FAULT_INJECTION: forcing a failure. [ 2674.200671] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.202001] CPU: 1 PID: 13489 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2674.202806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.203766] Call Trace: [ 2674.204075] dump_stack+0x107/0x167 [ 2674.204491] should_fail.cold+0x5/0xa [ 2674.204946] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2674.205532] should_failslab+0x5/0x20 [ 2674.205975] kmem_cache_alloc_trace+0x55/0x320 [ 2674.206497] __io_uring_add_tctx_node+0x15c/0x520 [ 2674.207056] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2674.207655] ? alloc_fd+0x2e7/0x670 [ 2674.208082] io_uring_setup+0x1fbb/0x2980 [ 2674.208561] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2674.209140] ? wait_for_completion_io+0x270/0x270 [ 2674.209730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.210338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.210933] do_syscall_64+0x33/0x40 [ 2674.211358] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.211953] RIP: 0033:0x7f838ee79b19 [ 2674.212380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.214517] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.215405] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2674.216234] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2674.217061] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2674.217889] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2674.218719] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:10:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 42) [ 2674.224330] FAULT_INJECTION: forcing a failure. [ 2674.224330] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.226969] CPU: 0 PID: 13492 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2674.228587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.230501] Call Trace: [ 2674.231113] dump_stack+0x107/0x167 [ 2674.231942] should_fail.cold+0x5/0xa [ 2674.232820] ? create_object.isra.0+0x3a/0xa20 [ 2674.233868] should_failslab+0x5/0x20 [ 2674.234737] kmem_cache_alloc+0x5b/0x310 [ 2674.235685] create_object.isra.0+0x3a/0xa20 [ 2674.236687] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2674.237871] kmem_cache_alloc+0x159/0x310 [ 2674.238841] proc_reg_open+0x1f1/0x5d0 [ 2674.239727] do_dentry_open+0x4b7/0x1090 [ 2674.240646] ? proc_reg_read+0x300/0x300 [ 2674.241587] ? may_open+0x1e4/0x400 [ 2674.242409] path_openat+0x19ba/0x2770 [ 2674.243311] ? path_lookupat+0x860/0x860 [ 2674.244255] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2674.245452] ? lock_acquire+0x197/0x470 [ 2674.246361] ? find_held_lock+0x2c/0x110 [ 2674.247315] do_filp_open+0x190/0x3e0 [ 2674.248169] ? may_open_dev+0xf0/0xf0 [ 2674.249052] ? simple_attr_release+0x50/0x50 [ 2674.250089] ? _raw_spin_unlock+0x1a/0x30 [ 2674.251023] ? alloc_fd+0x2e7/0x670 [ 2674.251852] do_sys_openat2+0x171/0x4d0 [ 2674.252753] ? security_file_free+0xaa/0xd0 [ 2674.253754] ? build_open_flags+0x6f0/0x6f0 [ 2674.254754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.255937] ? call_rcu+0x435/0x9c0 [ 2674.256773] __x64_sys_openat+0x13f/0x1f0 [ 2674.257731] ? __ia32_sys_open+0x1c0/0x1c0 [ 2674.258713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.259911] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.261100] do_syscall_64+0x33/0x40 [ 2674.261957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.263128] RIP: 0033:0x7f10a0111a04 [ 2674.264003] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2674.268180] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2674.269920] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2674.271567] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2674.273198] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2674.274888] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2674.276544] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:10:05 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:10:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:10:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 43) [ 2674.390161] FAULT_INJECTION: forcing a failure. [ 2674.390161] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.391513] CPU: 1 PID: 13500 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2674.392316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.393299] Call Trace: [ 2674.393616] dump_stack+0x107/0x167 [ 2674.394041] should_fail.cold+0x5/0xa [ 2674.394488] ? __seq_open_private+0x20/0xd0 [ 2674.394994] should_failslab+0x5/0x20 [ 2674.395441] __kmalloc+0x72/0x390 [ 2674.395841] __seq_open_private+0x20/0xd0 [ 2674.396331] seq_open_net+0x323/0x500 [ 2674.396770] ? proc_net_ns_init+0x410/0x410 [ 2674.397279] ? kmem_cache_alloc+0x2a6/0x310 [ 2674.397785] ? proc_net_ns_init+0x410/0x410 [ 2674.398290] proc_reg_open+0x25d/0x5d0 [ 2674.398747] do_dentry_open+0x4b7/0x1090 [ 2674.399221] ? proc_reg_read+0x300/0x300 [ 2674.399687] ? may_open+0x1e4/0x400 [ 2674.400109] path_openat+0x19ba/0x2770 [ 2674.400566] ? path_lookupat+0x860/0x860 [ 2674.401039] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2674.401656] ? lock_acquire+0x197/0x470 [ 2674.402117] ? find_held_lock+0x2c/0x110 [ 2674.402599] do_filp_open+0x190/0x3e0 [ 2674.403040] ? may_open_dev+0xf0/0xf0 [ 2674.403486] ? simple_attr_release+0x50/0x50 [ 2674.403996] ? _raw_spin_unlock+0x1a/0x30 [ 2674.404475] ? alloc_fd+0x2e7/0x670 [ 2674.404907] do_sys_openat2+0x171/0x4d0 [ 2674.405376] ? security_file_free+0xaa/0xd0 [ 2674.405878] ? build_open_flags+0x6f0/0x6f0 [ 2674.406383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.406990] ? call_rcu+0x435/0x9c0 [ 2674.407415] __x64_sys_openat+0x13f/0x1f0 [ 2674.407894] ? __ia32_sys_open+0x1c0/0x1c0 [ 2674.408388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.409000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.409623] do_syscall_64+0x33/0x40 [ 2674.410075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.410698] RIP: 0033:0x7f10a0111a04 [ 2674.411159] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2674.413403] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2674.414331] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2674.415191] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2674.416068] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2674.416955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2674.417832] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2674.422281] loop2: detected capacity change from 0 to 16777216 [ 2674.426756] FAT-fs (loop2): bogus number of reserved sectors [ 2674.427498] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2674.441657] loop2: detected capacity change from 0 to 16777216 [ 2674.445161] FAT-fs (loop2): bogus number of reserved sectors [ 2674.445973] FAT-fs (loop2): Can't find a valid FAT filesystem 05:10:20 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 55) 05:10:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200011}], 0x7ffff000, 0x0) 05:10:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x400300) 05:10:20 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:10:20 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 38) 05:10:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1010000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:10:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 44) [ 2689.205463] loop2: detected capacity change from 0 to 16842752 [ 2689.214169] FAULT_INJECTION: forcing a failure. [ 2689.214169] name failslab, interval 1, probability 0, space 0, times 0 [ 2689.216768] CPU: 1 PID: 13513 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2689.218242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2689.220001] Call Trace: [ 2689.220558] dump_stack+0x107/0x167 [ 2689.220689] FAT-fs (loop2): bogus number of reserved sectors [ 2689.221325] should_fail.cold+0x5/0xa [ 2689.221348] ? create_object.isra.0+0x3a/0xa20 [ 2689.221369] should_failslab+0x5/0x20 [ 2689.221408] kmem_cache_alloc+0x5b/0x310 [ 2689.222747] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2689.223498] create_object.isra.0+0x3a/0xa20 [ 2689.223514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2689.223538] kmem_cache_alloc_trace+0x151/0x320 [ 2689.230328] __io_uring_add_tctx_node+0x15c/0x520 [ 2689.231341] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2689.232442] ? alloc_fd+0x2e7/0x670 [ 2689.233222] io_uring_setup+0x1fbb/0x2980 [ 2689.234111] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2689.235172] ? wait_for_completion_io+0x270/0x270 [ 2689.236204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2689.237308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2689.238407] do_syscall_64+0x33/0x40 [ 2689.239187] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2689.240263] RIP: 0033:0x7f838ee79b19 [ 2689.241045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 05:10:20 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2689.244931] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2689.246735] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2689.248240] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2689.249761] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2689.251272] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2689.252781] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2689.256966] FAULT_INJECTION: forcing a failure. [ 2689.256966] name failslab, interval 1, probability 0, space 0, times 0 [ 2689.259376] CPU: 1 PID: 13528 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2689.260840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2689.262595] Call Trace: [ 2689.263150] dump_stack+0x107/0x167 [ 2689.263918] should_fail.cold+0x5/0xa [ 2689.264719] ? create_object.isra.0+0x3a/0xa20 [ 2689.265699] should_failslab+0x5/0x20 [ 2689.266500] kmem_cache_alloc+0x5b/0x310 [ 2689.267357] create_object.isra.0+0x3a/0xa20 [ 2689.268280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2689.269347] kmem_cache_alloc_trace+0x151/0x320 [ 2689.270338] ? io_async_queue_proc+0x80/0x80 [ 2689.271278] percpu_ref_init+0xd8/0x3d0 [ 2689.272121] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2689.273262] io_uring_setup+0x14f6/0x2980 [ 2689.274143] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2689.275213] ? wait_for_completion_io+0x270/0x270 [ 2689.276249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2689.277356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2689.278456] do_syscall_64+0x33/0x40 [ 2689.279237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2689.280312] RIP: 0033:0x7f9c3da0ab19 [ 2689.281103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2689.284990] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2689.286602] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2689.288109] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2689.289617] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2689.291125] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2689.292633] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2689.296909] FAULT_INJECTION: forcing a failure. [ 2689.296909] name failslab, interval 1, probability 0, space 0, times 0 [ 2689.299382] CPU: 1 PID: 13527 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2689.300852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2689.302620] Call Trace: [ 2689.303173] dump_stack+0x107/0x167 [ 2689.303944] should_fail.cold+0x5/0xa [ 2689.304747] ? create_object.isra.0+0x3a/0xa20 [ 2689.305726] should_failslab+0x5/0x20 [ 2689.305814] loop2: detected capacity change from 0 to 16842752 [ 2689.306521] kmem_cache_alloc+0x5b/0x310 [ 2689.306546] create_object.isra.0+0x3a/0xa20 [ 2689.306561] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2689.306585] __kmalloc+0x16e/0x390 [ 2689.311463] __seq_open_private+0x20/0xd0 [ 2689.312336] seq_open_net+0x323/0x500 [ 2689.313139] ? proc_net_ns_init+0x410/0x410 [ 2689.314057] ? kmem_cache_alloc+0x2a6/0x310 [ 2689.314968] ? proc_net_ns_init+0x410/0x410 [ 2689.315688] FAT-fs (loop2): bogus number of reserved sectors [ 2689.315876] proc_reg_open+0x25d/0x5d0 [ 2689.315895] do_dentry_open+0x4b7/0x1090 [ 2689.315918] ? proc_reg_read+0x300/0x300 [ 2689.317285] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2689.318023] ? may_open+0x1e4/0x400 [ 2689.318042] path_openat+0x19ba/0x2770 [ 2689.318070] ? path_lookupat+0x860/0x860 [ 2689.323404] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2689.324502] ? lock_acquire+0x197/0x470 [ 2689.325337] ? find_held_lock+0x2c/0x110 [ 2689.326209] do_filp_open+0x190/0x3e0 [ 2689.327007] ? may_open_dev+0xf0/0xf0 [ 2689.327819] ? simple_attr_release+0x50/0x50 [ 2689.328761] ? _raw_spin_unlock+0x1a/0x30 [ 2689.329637] ? alloc_fd+0x2e7/0x670 [ 2689.330422] do_sys_openat2+0x171/0x4d0 [ 2689.331257] ? security_file_free+0xaa/0xd0 [ 2689.332160] ? build_open_flags+0x6f0/0x6f0 [ 2689.333073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2689.334177] ? call_rcu+0x435/0x9c0 [ 2689.334945] __x64_sys_openat+0x13f/0x1f0 [ 2689.335815] ? __ia32_sys_open+0x1c0/0x1c0 [ 2689.336712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2689.337824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2689.338912] do_syscall_64+0x33/0x40 [ 2689.339690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2689.340765] RIP: 0033:0x7f10a0111a04 [ 2689.341558] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2689.345462] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2689.347070] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2689.348582] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2689.350100] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2689.351612] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2689.353121] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:10:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1300000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:10:20 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:10:20 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 39) 05:10:20 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 56) [ 2689.519246] loop2: detected capacity change from 0 to 19922944 [ 2689.534622] FAT-fs (loop2): bogus number of reserved sectors [ 2689.535914] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2689.569710] FAULT_INJECTION: forcing a failure. [ 2689.569710] name failslab, interval 1, probability 0, space 0, times 0 [ 2689.572396] CPU: 1 PID: 13541 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2689.573871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2689.575626] Call Trace: [ 2689.576185] dump_stack+0x107/0x167 [ 2689.576953] should_fail.cold+0x5/0xa [ 2689.577766] ? xas_alloc+0x336/0x440 [ 2689.578553] should_failslab+0x5/0x20 [ 2689.579351] kmem_cache_alloc+0x5b/0x310 [ 2689.580207] ? stack_trace_consume_entry+0x160/0x160 [ 2689.581275] xas_alloc+0x336/0x440 [ 2689.582032] xas_create+0x34a/0x10d0 [ 2689.582836] ? kernel_text_address+0xf2/0x120 [ 2689.583789] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2689.584903] xas_store+0x8c/0x1c40 [ 2689.585670] __xa_store+0x164/0x2d0 [ 2689.586438] ? xa_delete_node+0x280/0x280 [ 2689.587319] ? trace_hardirqs_on+0x5b/0x180 [ 2689.588227] xa_store+0x31/0x50 [ 2689.588919] __io_uring_add_tctx_node+0x1cf/0x520 [ 2689.589942] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2689.591035] ? alloc_fd+0x2e7/0x670 [ 2689.591803] io_uring_setup+0x1fbb/0x2980 [ 2689.592675] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2689.593746] ? wait_for_completion_io+0x270/0x270 [ 2689.594780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2689.595875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2689.596956] do_syscall_64+0x33/0x40 [ 2689.597747] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2689.598837] RIP: 0033:0x7f838ee79b19 [ 2689.599611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2689.603469] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2689.605070] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2689.606575] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2689.608077] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2689.609578] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2689.611080] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:10:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 45) 05:10:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x20000e}], 0x7ffff000, 0x0) 05:10:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2689.743863] FAULT_INJECTION: forcing a failure. [ 2689.743863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2689.746434] CPU: 1 PID: 13544 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2689.747884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2689.748365] FAULT_INJECTION: forcing a failure. [ 2689.748365] name failslab, interval 1, probability 0, space 0, times 0 [ 2689.749643] Call Trace: [ 2689.749670] dump_stack+0x107/0x167 [ 2689.749692] should_fail.cold+0x5/0xa [ 2689.749721] _copy_to_user+0x2e/0x180 [ 2689.755083] io_uring_setup+0x11b5/0x2980 [ 2689.755957] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2689.757017] ? wait_for_completion_io+0x270/0x270 [ 2689.758065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2689.759186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2689.760280] do_syscall_64+0x33/0x40 [ 2689.761073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2689.762206] RIP: 0033:0x7f9c3da0ab19 [ 2689.762997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2689.766880] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2689.768486] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2689.769993] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2689.771488] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2689.772993] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2689.774496] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2689.776021] CPU: 0 PID: 13548 Comm: syz-executor.7 Not tainted 5.10.239 #1 05:10:20 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2689.777597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2689.779641] Call Trace: [ 2689.780237] dump_stack+0x107/0x167 [ 2689.781056] should_fail.cold+0x5/0xa [ 2689.781938] ? seq_open+0x57/0x180 [ 2689.782746] should_failslab+0x5/0x20 [ 2689.783615] kmem_cache_alloc+0x5b/0x310 [ 2689.784542] seq_open+0x57/0x180 [ 2689.785308] __seq_open_private+0x38/0xd0 [ 2689.786257] seq_open_net+0x323/0x500 [ 2689.787122] ? proc_net_ns_init+0x410/0x410 [ 2689.788090] ? kmem_cache_alloc+0x2a6/0x310 [ 2689.789068] ? proc_net_ns_init+0x410/0x410 [ 2689.790047] proc_reg_open+0x25d/0x5d0 [ 2689.790926] do_dentry_open+0x4b7/0x1090 [ 2689.791838] ? proc_reg_read+0x300/0x300 [ 2689.792739] ? may_open+0x1e4/0x400 [ 2689.793568] path_openat+0x19ba/0x2770 [ 2689.794456] ? path_lookupat+0x860/0x860 [ 2689.795374] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2689.796560] ? lock_acquire+0x197/0x470 [ 2689.797476] ? find_held_lock+0x2c/0x110 [ 2689.798405] do_filp_open+0x190/0x3e0 [ 2689.799249] ? may_open_dev+0xf0/0xf0 [ 2689.800106] ? simple_attr_release+0x50/0x50 [ 2689.801098] ? _raw_spin_unlock+0x1a/0x30 [ 2689.802040] ? alloc_fd+0x2e7/0x670 [ 2689.802861] do_sys_openat2+0x171/0x4d0 [ 2689.803746] ? security_file_free+0xaa/0xd0 [ 2689.804705] ? build_open_flags+0x6f0/0x6f0 [ 2689.805686] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2689.806850] ? call_rcu+0x435/0x9c0 [ 2689.807679] __x64_sys_openat+0x13f/0x1f0 [ 2689.808611] ? __ia32_sys_open+0x1c0/0x1c0 [ 2689.809586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2689.810750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2689.811909] do_syscall_64+0x33/0x40 [ 2689.812742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2689.813895] RIP: 0033:0x7f10a0111a04 [ 2689.814731] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2689.818861] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2689.820558] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2689.822170] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2689.823783] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2689.825396] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2689.827017] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:10:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x3000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2690.117600] loop2: detected capacity change from 0 to 50331648 [ 2690.140962] FAT-fs (loop2): bogus number of reserved sectors [ 2690.142350] FAT-fs (loop2): Can't find a valid FAT filesystem 05:10:36 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 40) 05:10:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200011}], 0x7ffff000, 0x0) 05:10:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200030}], 0x7ffff000, 0x0) 05:10:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 46) 05:10:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:10:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x1000000) 05:10:36 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:10:36 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 57) [ 2705.351261] FAULT_INJECTION: forcing a failure. [ 2705.351261] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.353877] CPU: 0 PID: 13584 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2705.355472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.357489] Call Trace: [ 2705.358116] dump_stack+0x107/0x167 [ 2705.358527] FAULT_INJECTION: forcing a failure. [ 2705.358527] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.358943] should_fail.cold+0x5/0xa [ 2705.358968] ? __d_alloc+0x2a/0x990 [ 2705.358995] should_failslab+0x5/0x20 [ 2705.363791] kmem_cache_alloc+0x5b/0x310 [ 2705.364716] __d_alloc+0x2a/0x990 [ 2705.365498] ? find_held_lock+0x2c/0x110 [ 2705.366425] d_alloc_pseudo+0x19/0x70 [ 2705.367283] alloc_file_pseudo+0xce/0x250 [ 2705.368220] ? trace_hardirqs_on+0x5b/0x180 [ 2705.369190] ? alloc_file+0x5a0/0x5a0 [ 2705.370069] anon_inode_getfile+0xc8/0x1f0 [ 2705.371029] io_uring_setup+0x138b/0x2980 [ 2705.371968] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2705.373106] ? wait_for_completion_io+0x270/0x270 [ 2705.374221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.375409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.376579] do_syscall_64+0x33/0x40 [ 2705.377424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2705.378594] RIP: 0033:0x7f9c3da0ab19 [ 2705.379433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.383605] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2705.385323] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2705.386941] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2705.388555] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2705.390179] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2705.391786] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2705.393437] CPU: 1 PID: 13580 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2705.394935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.395580] loop2: detected capacity change from 0 to 67108864 [ 2705.396680] Call Trace: [ 2705.396701] dump_stack+0x107/0x167 [ 2705.396730] should_fail.cold+0x5/0xa [ 2705.400152] ? create_object.isra.0+0x3a/0xa20 [ 2705.401123] should_failslab+0x5/0x20 [ 2705.401933] kmem_cache_alloc+0x5b/0x310 [ 2705.402793] create_object.isra.0+0x3a/0xa20 [ 2705.403150] FAULT_INJECTION: forcing a failure. [ 2705.403150] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.403709] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2705.403734] kmem_cache_alloc+0x159/0x310 [ 2705.408146] xas_alloc+0x336/0x440 [ 2705.408895] xas_create+0x34a/0x10d0 [ 2705.409703] ? kernel_text_address+0xf2/0x120 [ 2705.410654] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2705.411769] xas_store+0x8c/0x1c40 [ 2705.412531] __xa_store+0x164/0x2d0 [ 2705.413300] ? xa_delete_node+0x280/0x280 [ 2705.414190] ? trace_hardirqs_on+0x5b/0x180 [ 2705.415104] xa_store+0x31/0x50 [ 2705.415800] __io_uring_add_tctx_node+0x1cf/0x520 [ 2705.416811] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2705.417928] ? alloc_fd+0x2e7/0x670 [ 2705.418707] io_uring_setup+0x1fbb/0x2980 [ 2705.419590] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2705.420668] ? wait_for_completion_io+0x270/0x270 [ 2705.421716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.422836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.423924] do_syscall_64+0x33/0x40 [ 2705.424710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2705.425800] RIP: 0033:0x7f838ee79b19 [ 2705.426585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.430498] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2705.432110] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2705.433624] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2705.435135] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2705.436642] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2705.438149] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2705.439678] CPU: 0 PID: 13585 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2705.441250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.443139] Call Trace: [ 2705.443735] dump_stack+0x107/0x167 [ 2705.444560] should_fail.cold+0x5/0xa [ 2705.445422] ? create_object.isra.0+0x3a/0xa20 [ 2705.446459] should_failslab+0x5/0x20 [ 2705.447314] kmem_cache_alloc+0x5b/0x310 [ 2705.448240] create_object.isra.0+0x3a/0xa20 [ 2705.449230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2705.450384] kmem_cache_alloc+0x159/0x310 [ 2705.451328] seq_open+0x57/0x180 [ 2705.452102] __seq_open_private+0x38/0xd0 [ 2705.453038] seq_open_net+0x323/0x500 [ 2705.453912] ? proc_net_ns_init+0x410/0x410 [ 2705.454886] ? kmem_cache_alloc+0x2a6/0x310 [ 2705.455860] ? proc_net_ns_init+0x410/0x410 [ 2705.456830] proc_reg_open+0x25d/0x5d0 [ 2705.457717] do_dentry_open+0x4b7/0x1090 [ 2705.458634] ? proc_reg_read+0x300/0x300 [ 2705.459544] ? may_open+0x1e4/0x400 [ 2705.460370] path_openat+0x19ba/0x2770 [ 2705.461258] ? path_lookupat+0x860/0x860 [ 2705.462182] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2705.463361] ? lock_acquire+0x197/0x470 [ 2705.464263] ? find_held_lock+0x2c/0x110 [ 2705.465188] do_filp_open+0x190/0x3e0 [ 2705.466047] ? may_open_dev+0xf0/0xf0 [ 2705.466916] ? simple_attr_release+0x50/0x50 [ 2705.467914] ? _raw_spin_unlock+0x1a/0x30 [ 2705.468843] ? alloc_fd+0x2e7/0x670 [ 2705.469683] do_sys_openat2+0x171/0x4d0 [ 2705.470572] ? security_file_free+0xaa/0xd0 [ 2705.471544] ? build_open_flags+0x6f0/0x6f0 [ 2705.472521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.473707] ? call_rcu+0x435/0x9c0 [ 2705.474530] __x64_sys_openat+0x13f/0x1f0 [ 2705.475468] ? __ia32_sys_open+0x1c0/0x1c0 [ 2705.476425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.477623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.478785] do_syscall_64+0x33/0x40 [ 2705.479623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2705.480783] RIP: 0033:0x7f10a0111a04 [ 2705.481628] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2705.485784] RSP: 002b:00007f109d6d4060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2705.487496] RAX: ffffffffffffffda RBX: 00007f10a0271f60 RCX: 00007f10a0111a04 [ 2705.489094] RDX: 0000000000000000 RSI: 00007f109d6d40f0 RDI: 00000000ffffff9c [ 2705.490706] RBP: 00007f109d6d40f0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2705.492302] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2705.493913] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 [ 2705.497364] FAT-fs (loop2): bogus number of reserved sectors [ 2705.498813] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2705.519865] loop2: detected capacity change from 0 to 67108864 05:10:36 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 41) 05:10:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (fail_nth: 47) [ 2705.547899] FAT-fs (loop2): bogus number of reserved sectors [ 2705.549172] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2705.561513] FAULT_INJECTION: forcing a failure. [ 2705.561513] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.563898] CPU: 1 PID: 13594 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2705.565362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.567134] Call Trace: [ 2705.567700] dump_stack+0x107/0x167 [ 2705.568475] should_fail.cold+0x5/0xa [ 2705.569287] ? create_object.isra.0+0x3a/0xa20 [ 2705.570265] should_failslab+0x5/0x20 [ 2705.571100] kmem_cache_alloc+0x5b/0x310 [ 2705.571988] create_object.isra.0+0x3a/0xa20 [ 2705.572946] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2705.574065] kmem_cache_alloc+0x159/0x310 [ 2705.574978] __d_alloc+0x2a/0x990 [ 2705.575730] ? find_held_lock+0x2c/0x110 [ 2705.576619] d_alloc_pseudo+0x19/0x70 [ 2705.577447] alloc_file_pseudo+0xce/0x250 [ 2705.578359] ? trace_hardirqs_on+0x5b/0x180 [ 2705.579298] ? alloc_file+0x5a0/0x5a0 [ 2705.580146] anon_inode_getfile+0xc8/0x1f0 [ 2705.581071] io_uring_setup+0x138b/0x2980 [ 2705.581988] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2705.583099] ? wait_for_completion_io+0x270/0x270 [ 2705.584173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.585317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.586456] do_syscall_64+0x33/0x40 [ 2705.587264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2705.588382] RIP: 0033:0x7f9c3da0ab19 [ 2705.589195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.593239] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2705.594921] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2705.596481] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2705.598049] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2705.599610] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2705.601173] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:10:36 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2705.671259] FAULT_INJECTION: forcing a failure. [ 2705.671259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2705.673920] CPU: 1 PID: 13597 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2705.675443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.677262] Call Trace: [ 2705.677856] dump_stack+0x107/0x167 [ 2705.678653] should_fail.cold+0x5/0xa [ 2705.679496] _copy_to_user+0x2e/0x180 [ 2705.680335] simple_read_from_buffer+0xcc/0x160 [ 2705.681363] proc_fail_nth_read+0x198/0x230 [ 2705.682321] ? proc_sessionid_read+0x230/0x230 [ 2705.683319] ? security_file_permission+0xb1/0xe0 [ 2705.684381] ? proc_sessionid_read+0x230/0x230 [ 2705.685379] vfs_read+0x228/0x620 [ 2705.686153] ksys_read+0x12d/0x260 [ 2705.686933] ? vfs_write+0xb10/0xb10 [ 2705.687751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.688898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.690041] do_syscall_64+0x33/0x40 [ 2705.690855] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2705.691973] RIP: 0033:0x7f10a011169c [ 2705.692819] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2705.696885] RSP: 002b:00007f109d6d4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2705.698560] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f10a011169c [ 2705.700113] RDX: 000000000000000f RSI: 00007f109d6d41e0 RDI: 0000000000000004 [ 2705.701699] RBP: 00007f109d6d41d0 R08: 0000000000000000 R09: 00007f109d6d3f70 [ 2705.703252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2705.704810] R13: 00007ffef8f5f4df R14: 00007f109d6d4300 R15: 0000000000022000 05:10:36 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 58) 05:10:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x5000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:10:36 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 42) [ 2705.759102] FAULT_INJECTION: forcing a failure. [ 2705.759102] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.761857] CPU: 0 PID: 13601 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2705.763480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.765418] Call Trace: [ 2705.766044] dump_stack+0x107/0x167 [ 2705.766902] should_fail.cold+0x5/0xa [ 2705.767796] ? xas_alloc+0x336/0x440 [ 2705.768670] should_failslab+0x5/0x20 [ 2705.769573] kmem_cache_alloc+0x5b/0x310 [ 2705.770530] xas_alloc+0x336/0x440 [ 2705.771362] xas_create+0x34a/0x10d0 [ 2705.772243] ? kernel_text_address+0xf2/0x120 [ 2705.773297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2705.774540] xas_store+0x8c/0x1c40 [ 2705.775383] __xa_store+0x164/0x2d0 [ 2705.776238] ? xa_delete_node+0x280/0x280 [ 2705.777214] ? trace_hardirqs_on+0x5b/0x180 [ 2705.778241] xa_store+0x31/0x50 [ 2705.779017] __io_uring_add_tctx_node+0x1cf/0x520 [ 2705.780143] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2705.781370] ? alloc_fd+0x2e7/0x670 [ 2705.782243] io_uring_setup+0x1fbb/0x2980 [ 2705.783220] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2705.784401] ? wait_for_completion_io+0x270/0x270 [ 2705.785559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.786780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.787980] do_syscall_64+0x33/0x40 [ 2705.788843] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2705.790040] RIP: 0033:0x7f838ee79b19 [ 2705.790903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.795202] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2705.796969] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2705.798632] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2705.800287] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2705.801949] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2705.803603] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2705.879258] FAULT_INJECTION: forcing a failure. [ 2705.879258] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.881991] CPU: 0 PID: 13606 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2705.883613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.885569] Call Trace: [ 2705.886188] dump_stack+0x107/0x167 [ 2705.887042] should_fail.cold+0x5/0xa [ 2705.887933] ? __alloc_file+0x21/0x320 [ 2705.888843] should_failslab+0x5/0x20 [ 2705.889744] kmem_cache_alloc+0x5b/0x310 [ 2705.890696] __alloc_file+0x21/0x320 [ 2705.891563] alloc_empty_file+0x6d/0x170 [ 2705.892508] alloc_file+0x5e/0x5a0 [ 2705.893340] alloc_file_pseudo+0x16a/0x250 [ 2705.894333] ? alloc_file+0x5a0/0x5a0 [ 2705.895235] anon_inode_getfile+0xc8/0x1f0 [ 2705.896225] io_uring_setup+0x138b/0x2980 [ 2705.897201] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2705.898391] ? wait_for_completion_io+0x270/0x270 [ 2705.899535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.900760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.901974] do_syscall_64+0x33/0x40 [ 2705.902841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2705.904040] RIP: 0033:0x7f9c3da0ab19 [ 2705.904907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.909251] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2705.911047] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2705.912714] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2705.914394] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2705.916065] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2705.917741] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2705.934142] loop2: detected capacity change from 0 to 83886080 [ 2705.942948] FAT-fs (loop2): bogus number of reserved sectors [ 2705.944367] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2705.968218] loop2: detected capacity change from 0 to 83886080 [ 2705.977526] FAT-fs (loop2): bogus number of reserved sectors [ 2705.979457] FAT-fs (loop2): Can't find a valid FAT filesystem 05:10:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200031}], 0x7ffff000, 0x0) 05:10:53 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2722.007064] FAULT_INJECTION: forcing a failure. [ 2722.007064] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.009663] CPU: 0 PID: 13624 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2722.011222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2722.013087] Call Trace: [ 2722.013703] dump_stack+0x107/0x167 [ 2722.014527] should_fail.cold+0x5/0xa [ 2722.015387] ? create_object.isra.0+0x3a/0xa20 [ 2722.016423] should_failslab+0x5/0x20 [ 2722.017273] kmem_cache_alloc+0x5b/0x310 [ 2722.018202] create_object.isra.0+0x3a/0xa20 [ 2722.019189] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2722.020332] kmem_cache_alloc+0x159/0x310 [ 2722.021267] __alloc_file+0x21/0x320 [ 2722.022105] alloc_empty_file+0x6d/0x170 [ 2722.023025] alloc_file+0x5e/0x5a0 [ 2722.023824] alloc_file_pseudo+0x16a/0x250 [ 2722.024775] ? alloc_file+0x5a0/0x5a0 [ 2722.025647] anon_inode_getfile+0xc8/0x1f0 [ 2722.026604] io_uring_setup+0x138b/0x2980 [ 2722.027539] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2722.028685] ? wait_for_completion_io+0x270/0x270 [ 2722.029797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2722.030982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2722.032140] do_syscall_64+0x33/0x40 [ 2722.032987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2722.034148] RIP: 0033:0x7f9c3da0ab19 [ 2722.034982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 05:10:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x2000000) 05:10:53 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 59) 05:10:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:10:53 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 43) 05:10:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:10:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x5050000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2722.039144] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2722.040998] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2722.042624] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2722.044223] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2722.045836] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2722.047443] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2722.068721] FAULT_INJECTION: forcing a failure. [ 2722.068721] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.071497] CPU: 1 PID: 13635 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2722.072935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2722.074657] Call Trace: [ 2722.075207] dump_stack+0x107/0x167 [ 2722.075956] should_fail.cold+0x5/0xa [ 2722.076820] ? create_object.isra.0+0x3a/0xa20 [ 2722.077795] should_failslab+0x5/0x20 [ 2722.078584] kmem_cache_alloc+0x5b/0x310 [ 2722.079412] ? mark_held_locks+0x9e/0xe0 [ 2722.080272] create_object.isra.0+0x3a/0xa20 [ 2722.081256] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2722.082333] kmem_cache_alloc+0x159/0x310 [ 2722.083270] xas_alloc+0x336/0x440 [ 2722.084031] xas_create+0x34a/0x10d0 [ 2722.084976] ? kernel_text_address+0xf2/0x120 [ 2722.085967] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2722.087075] xas_store+0x8c/0x1c40 [ 2722.087827] __xa_store+0x164/0x2d0 [ 2722.088616] ? xa_delete_node+0x280/0x280 [ 2722.089474] ? trace_hardirqs_on+0x5b/0x180 [ 2722.090366] xa_store+0x31/0x50 [ 2722.091043] __io_uring_add_tctx_node+0x1cf/0x520 [ 2722.092020] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2722.093095] ? alloc_fd+0x2e7/0x670 [ 2722.093881] io_uring_setup+0x1fbb/0x2980 [ 2722.094813] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2722.095882] ? wait_for_completion_io+0x270/0x270 [ 2722.097114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2722.098236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2722.099321] do_syscall_64+0x33/0x40 [ 2722.100275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2722.101330] RIP: 0033:0x7f838ee79b19 [ 2722.102303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2722.106087] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2722.108015] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2722.109850] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2722.111651] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2722.113454] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2722.114960] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2722.121044] loop2: detected capacity change from 0 to 84213760 [ 2722.121286] FAULT_INJECTION: forcing a failure. [ 2722.121286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2722.125333] CPU: 1 PID: 13634 Comm: syz-executor.4 Not tainted 5.10.239 #1 [ 2722.126764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2722.128464] Call Trace: [ 2722.129122] dump_stack+0x107/0x167 [ 2722.129892] should_fail.cold+0x5/0xa [ 2722.130675] _copy_from_user+0x2e/0x1b0 [ 2722.131480] copy_clone_args_from_user+0x147/0x790 [ 2722.132498] ? lock_acquire+0x197/0x470 [ 2722.133339] ? sighand_ctor+0x40/0x40 [ 2722.134218] ? find_held_lock+0x2c/0x110 [ 2722.135088] ? ksys_write+0x21a/0x260 [ 2722.135887] ? lock_downgrade+0x6d0/0x6d0 [ 2722.136755] __do_sys_clone3+0x9d/0x320 [ 2722.137578] ? __do_sys_clone+0x110/0x110 [ 2722.138582] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2722.139759] ? wait_for_completion_io+0x270/0x270 [ 2722.140821] ? rcu_read_lock_any_held+0x75/0xa0 [ 2722.141972] ? vfs_write+0x354/0xb10 [ 2722.142748] ? fput_many+0x2f/0x1a0 [ 2722.143663] ? ksys_write+0x1a9/0x260 [ 2722.144451] ? __ia32_sys_read+0xb0/0xb0 [ 2722.145303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2722.146605] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2722.147722] ? trace_hardirqs_on+0x5b/0x180 [ 2722.148678] do_syscall_64+0x33/0x40 [ 2722.149456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2722.150744] RIP: 0033:0x7f46dc7f2b19 [ 2722.151525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2722.155490] RSP: 002b:00007f46d9d68188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2722.157154] RAX: ffffffffffffffda RBX: 00007f46dc905f60 RCX: 00007f46dc7f2b19 [ 2722.158695] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2722.160242] RBP: 00007f46d9d681d0 R08: 0000000000000000 R09: 0000000000000000 [ 2722.161792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2722.163275] R13: 00007ffd72f7f53f R14: 00007f46d9d68300 R15: 0000000000022000 [ 2722.173996] FAT-fs (loop2): bogus number of reserved sectors [ 2722.175493] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2722.204541] loop2: detected capacity change from 0 to 84213760 [ 2722.230913] FAT-fs (loop2): bogus number of reserved sectors [ 2722.232382] FAT-fs (loop2): Can't find a valid FAT filesystem 05:10:53 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 44) 05:10:53 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:10:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x6000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:10:53 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 60) [ 2722.335388] FAULT_INJECTION: forcing a failure. [ 2722.335388] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.337878] CPU: 1 PID: 13645 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2722.339310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2722.341007] Call Trace: [ 2722.341684] dump_stack+0x107/0x167 [ 2722.342472] should_fail.cold+0x5/0xa [ 2722.343431] ? security_file_alloc+0x34/0x170 [ 2722.344419] should_failslab+0x5/0x20 [ 2722.345238] kmem_cache_alloc+0x5b/0x310 [ 2722.346118] security_file_alloc+0x34/0x170 [ 2722.347019] __alloc_file+0xb7/0x320 [ 2722.347883] alloc_empty_file+0x6d/0x170 [ 2722.348708] alloc_file+0x5e/0x5a0 [ 2722.349447] alloc_file_pseudo+0x16a/0x250 [ 2722.350352] ? alloc_file+0x5a0/0x5a0 [ 2722.351179] anon_inode_getfile+0xc8/0x1f0 [ 2722.352057] io_uring_setup+0x138b/0x2980 [ 2722.352915] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2722.353975] ? wait_for_completion_io+0x270/0x270 [ 2722.354995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2722.356196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2722.357404] do_syscall_64+0x33/0x40 [ 2722.358184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2722.359239] RIP: 0033:0x7f9c3da0ab19 [ 2722.360020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2722.363983] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2722.365609] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2722.367074] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2722.368808] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2722.370372] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2722.371845] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2722.387412] loop2: detected capacity change from 0 to 100663296 05:10:53 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fadvise64(r1, 0x9154, 0x189, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x4, 0x0, 0x0, 0x24000000000000, 0x1f02c, 0xf, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xea, 0x2, @perf_config_ext={0xa, 0x9}, 0x118d0, 0x8, 0x6, 0x6, 0xf7, 0xedd, 0x401, 0x0, 0x2, 0x0, 0x9}, r2, 0xd, r1, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xfe, 0x3f, 0x7, 0x1, 0x0, 0x3, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x14}, 0x19009, 0x3, 0x4, 0x6, 0x8, 0x9, 0x0, 0x0, 0x200, 0x0, 0x2}, 0xffffffffffffffff, 0xe, r1, 0x9) creat(&(0x7f0000000000)='./file0\x00', 0x81) [ 2722.400302] FAULT_INJECTION: forcing a failure. [ 2722.400302] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.402680] CPU: 1 PID: 13653 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2722.404115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2722.405836] Call Trace: [ 2722.406526] dump_stack+0x107/0x167 [ 2722.407294] should_fail.cold+0x5/0xa [ 2722.408085] ? xas_alloc+0x336/0x440 [ 2722.408859] should_failslab+0x5/0x20 [ 2722.409653] kmem_cache_alloc+0x5b/0x310 [ 2722.410602] xas_alloc+0x336/0x440 [ 2722.411354] xas_create+0x34a/0x10d0 [ 2722.412141] ? kernel_text_address+0xf2/0x120 [ 2722.413075] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2722.414189] xas_store+0x8c/0x1c40 [ 2722.415117] __xa_store+0x164/0x2d0 [ 2722.415896] ? xa_delete_node+0x280/0x280 [ 2722.416868] ? trace_hardirqs_on+0x5b/0x180 [ 2722.418001] xa_store+0x31/0x50 [ 2722.418836] __io_uring_add_tctx_node+0x1cf/0x520 [ 2722.419899] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2722.420987] ? alloc_fd+0x2e7/0x670 [ 2722.421800] io_uring_setup+0x1fbb/0x2980 [ 2722.422673] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2722.423700] ? wait_for_completion_io+0x270/0x270 [ 2722.424728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2722.425827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2722.426897] do_syscall_64+0x33/0x40 [ 2722.427758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2722.428831] RIP: 0033:0x7f838ee79b19 [ 2722.429802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2722.434101] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2722.435670] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2722.437221] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2722.438999] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2722.440514] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2722.441995] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2722.447162] FAT-fs (loop2): bogus number of reserved sectors [ 2722.448646] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200300}], 0x7ffff000, 0x0) 05:11:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x3000000) 05:11:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:11:08 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 45) 05:11:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x6050000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:11:08 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 61) 05:11:08 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:11:08 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2737.552371] FAULT_INJECTION: forcing a failure. [ 2737.552371] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.554972] CPU: 0 PID: 13678 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2737.556514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2737.558381] Call Trace: [ 2737.558972] dump_stack+0x107/0x167 [ 2737.559790] should_fail.cold+0x5/0xa [ 2737.560643] ? create_object.isra.0+0x3a/0xa20 [ 2737.561665] should_failslab+0x5/0x20 [ 2737.562175] FAULT_INJECTION: forcing a failure. [ 2737.562175] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.562519] kmem_cache_alloc+0x5b/0x310 [ 2737.562547] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2737.566908] create_object.isra.0+0x3a/0xa20 [ 2737.567884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2737.569031] kmem_cache_alloc+0x159/0x310 [ 2737.569970] security_file_alloc+0x34/0x170 [ 2737.570931] __alloc_file+0xb7/0x320 [ 2737.571764] alloc_empty_file+0x6d/0x170 [ 2737.572672] alloc_file+0x5e/0x5a0 [ 2737.573467] alloc_file_pseudo+0x16a/0x250 [ 2737.574417] ? alloc_file+0x5a0/0x5a0 [ 2737.575278] anon_inode_getfile+0xc8/0x1f0 [ 2737.576230] io_uring_setup+0x138b/0x2980 [ 2737.577165] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2737.578305] ? wait_for_completion_io+0x270/0x270 [ 2737.579407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.580576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.581729] do_syscall_64+0x33/0x40 [ 2737.582569] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2737.583709] RIP: 0033:0x7f9c3da0ab19 [ 2737.584542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.588641] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2737.590348] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2737.591938] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2737.593512] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2737.595110] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2737.596683] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2737.598312] CPU: 1 PID: 13681 Comm: syz-executor.4 Not tainted 5.10.239 #1 [ 2737.599995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2737.601937] Call Trace: [ 2737.602483] dump_stack+0x107/0x167 [ 2737.602859] FAULT_INJECTION: forcing a failure. [ 2737.602859] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.603325] should_fail.cold+0x5/0xa [ 2737.603358] ? copy_process+0x3301/0x78b0 [ 2737.607685] should_failslab+0x5/0x20 [ 2737.608464] kmem_cache_alloc_node+0x55/0x330 [ 2737.609485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.610769] copy_process+0x3301/0x78b0 [ 2737.611596] ? mark_lock+0xf5/0x2df0 [ 2737.612443] ? lock_acquire+0x197/0x470 [ 2737.613474] ? find_held_lock+0x2c/0x110 [ 2737.614361] ? __cleanup_sighand+0xb0/0xb0 [ 2737.615247] ? _copy_from_user+0xfb/0x1b0 [ 2737.616196] kernel_clone+0xe7/0x980 [ 2737.617173] ? lock_acquire+0x197/0x470 [ 2737.618008] ? create_io_thread+0xf0/0xf0 [ 2737.618937] ? ksys_write+0x21a/0x260 [ 2737.619854] ? lock_downgrade+0x6d0/0x6d0 [ 2737.620709] __do_sys_clone3+0x1e5/0x320 [ 2737.621539] ? __do_sys_clone+0x110/0x110 [ 2737.622419] ? rcu_read_lock_any_held+0x75/0xa0 [ 2737.623366] ? vfs_write+0x354/0xb10 [ 2737.624125] ? fput_many+0x2f/0x1a0 [ 2737.624865] ? ksys_write+0x1a9/0x260 [ 2737.625644] ? __ia32_sys_read+0xb0/0xb0 [ 2737.626506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.627585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.628667] ? trace_hardirqs_on+0x5b/0x180 [ 2737.629554] do_syscall_64+0x33/0x40 [ 2737.630324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2737.631368] RIP: 0033:0x7f46dc7f2b19 [ 2737.632139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.636056] RSP: 002b:00007f46d9d68188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2737.637759] RAX: ffffffffffffffda RBX: 00007f46dc905f60 RCX: 00007f46dc7f2b19 [ 2737.639481] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2737.641048] RBP: 00007f46d9d681d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.642667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2737.644364] R13: 00007ffd72f7f53f R14: 00007f46d9d68300 R15: 0000000000022000 [ 2737.645860] CPU: 0 PID: 13684 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2737.647399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2737.649217] Call Trace: [ 2737.649792] dump_stack+0x107/0x167 [ 2737.650597] should_fail.cold+0x5/0xa [ 2737.651412] ? ___slab_alloc+0x155/0x700 [ 2737.652290] ? create_object.isra.0+0x3a/0xa20 [ 2737.653270] should_failslab+0x5/0x20 [ 2737.654092] kmem_cache_alloc+0x5b/0x310 [ 2737.654980] create_object.isra.0+0x3a/0xa20 [ 2737.655938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2737.657043] kmem_cache_alloc+0x159/0x310 [ 2737.657962] xas_alloc+0x336/0x440 [ 2737.658737] xas_create+0x34a/0x10d0 [ 2737.659551] ? kernel_text_address+0xf2/0x120 [ 2737.660527] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2737.661656] xas_store+0x8c/0x1c40 [ 2737.662441] __xa_store+0x164/0x2d0 [ 2737.663222] ? xa_delete_node+0x280/0x280 [ 2737.664118] ? trace_hardirqs_on+0x5b/0x180 [ 2737.665054] xa_store+0x31/0x50 [ 2737.665765] __io_uring_add_tctx_node+0x1cf/0x520 [ 2737.666806] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2737.667940] ? alloc_fd+0x2e7/0x670 [ 2737.668729] io_uring_setup+0x1fbb/0x2980 [ 2737.669622] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2737.670714] ? wait_for_completion_io+0x270/0x270 [ 2737.671773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.672902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.674022] do_syscall_64+0x33/0x40 [ 2737.674820] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2737.675917] RIP: 0033:0x7f838ee79b19 [ 2737.676719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.680672] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2737.682313] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2737.684084] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2737.686088] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2737.688053] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2737.689649] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2737.705746] loop2: detected capacity change from 0 to 100990976 [ 2737.717239] FAT-fs (loop2): bogus number of reserved sectors [ 2737.720394] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:08 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 46) [ 2737.768688] loop2: detected capacity change from 0 to 100990976 [ 2737.778608] FAULT_INJECTION: forcing a failure. [ 2737.778608] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.780956] CPU: 1 PID: 13690 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2737.782389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2737.784075] Call Trace: [ 2737.784618] dump_stack+0x107/0x167 [ 2737.785375] should_fail.cold+0x5/0xa [ 2737.786173] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2737.787228] should_failslab+0x5/0x20 [ 2737.788009] kmem_cache_alloc_trace+0x55/0x320 [ 2737.788949] io_uring_alloc_task_context+0x99/0x6a0 [ 2737.790001] ? io_import_iovec+0x1120/0x1120 [ 2737.790909] ? lock_downgrade+0x6d0/0x6d0 [ 2737.791792] ? do_raw_spin_lock+0x121/0x260 [ 2737.792674] ? rwlock_bug.part.0+0x90/0x90 [ 2737.793628] __io_uring_add_tctx_node+0x2c6/0x520 [ 2737.794636] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2737.795740] ? alloc_fd+0x2e7/0x670 [ 2737.796624] io_uring_setup+0x1fbb/0x2980 [ 2737.797644] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2737.798750] ? wait_for_completion_io+0x270/0x270 [ 2737.799968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.801064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.802401] do_syscall_64+0x33/0x40 [ 2737.803178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2737.804447] RIP: 0033:0x7f9c3da0ab19 [ 2737.805267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.809620] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2737.811295] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2737.812987] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2737.814749] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2737.816469] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2737.818186] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2737.825750] FAT-fs (loop2): bogus number of reserved sectors [ 2737.827290] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:08 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:11:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x7000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2737.973132] loop2: detected capacity change from 0 to 117440512 05:11:09 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 62) 05:11:09 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2738.008358] FAT-fs (loop2): bogus number of reserved sectors [ 2738.009545] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2738.030605] loop2: detected capacity change from 0 to 117440512 [ 2738.040897] FAT-fs (loop2): bogus number of reserved sectors [ 2738.042367] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x442680, 0xf4) syz_io_uring_setup(0x4d50, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) sendfile(r0, r0, 0x0, 0xb5b) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x1d3) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x54, 0x2, 0x464a, 0xa2, 0x10001}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x9, &(0x7f0000000180)=[r0, r0], 0x2, 0x0, 0x1}, 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x12, 0x1, 0x0, 0xc0, 0x0, 0x0, 0x849, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000080), 0xe}, 0x206, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @mcast2, 0x4}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x2, 0xf9, 0x7f, 0x1f, 0x0, 0x8000, 0x8, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x2}, 0x42002, 0x40, 0x1000, 0x2, 0x9, 0x2, 0x6, 0x0, 0x8000}, r3, 0x1, r5, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00'}) [ 2738.067396] FAULT_INJECTION: forcing a failure. [ 2738.067396] name failslab, interval 1, probability 0, space 0, times 0 [ 2738.069402] CPU: 0 PID: 13704 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2738.070584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2738.071971] Call Trace: [ 2738.072423] dump_stack+0x107/0x167 [ 2738.073040] should_fail.cold+0x5/0xa [ 2738.073679] ? xas_alloc+0x336/0x440 [ 2738.074319] should_failslab+0x5/0x20 [ 2738.074962] kmem_cache_alloc+0x5b/0x310 [ 2738.075660] xas_alloc+0x336/0x440 [ 2738.076263] xas_create+0x34a/0x10d0 [ 2738.076902] ? kernel_text_address+0xf2/0x120 [ 2738.077650] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2738.078542] xas_store+0x8c/0x1c40 [ 2738.079148] __xa_store+0x164/0x2d0 [ 2738.079757] ? xa_delete_node+0x280/0x280 [ 2738.080452] ? trace_hardirqs_on+0x5b/0x180 [ 2738.081178] xa_store+0x31/0x50 [ 2738.081735] __io_uring_add_tctx_node+0x1cf/0x520 [ 2738.082554] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2738.083420] ? alloc_fd+0x2e7/0x670 [ 2738.084043] io_uring_setup+0x1fbb/0x2980 [ 2738.084755] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2738.085602] ? wait_for_completion_io+0x270/0x270 [ 2738.086431] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2738.087303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2738.088160] do_syscall_64+0x33/0x40 [ 2738.088770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2738.089614] RIP: 0033:0x7f838ee79b19 [ 2738.090252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2738.093266] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2738.094528] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2738.095701] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2738.096868] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2738.098060] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2738.099236] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:11:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x7050000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:11:09 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 47) [ 2738.152693] FAULT_INJECTION: forcing a failure. [ 2738.152693] name failslab, interval 1, probability 0, space 0, times 0 [ 2738.154576] CPU: 0 PID: 13712 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2738.155701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2738.157032] Call Trace: [ 2738.157457] dump_stack+0x107/0x167 [ 2738.158055] should_fail.cold+0x5/0xa [ 2738.158677] ? create_object.isra.0+0x3a/0xa20 [ 2738.159415] should_failslab+0x5/0x20 [ 2738.160040] kmem_cache_alloc+0x5b/0x310 [ 2738.160764] create_object.isra.0+0x3a/0xa20 [ 2738.161488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2738.162313] kmem_cache_alloc_trace+0x151/0x320 [ 2738.163066] io_uring_alloc_task_context+0x99/0x6a0 [ 2738.163860] ? io_import_iovec+0x1120/0x1120 [ 2738.164559] ? lock_downgrade+0x6d0/0x6d0 [ 2738.165220] ? do_raw_spin_lock+0x121/0x260 [ 2738.165913] ? rwlock_bug.part.0+0x90/0x90 [ 2738.166597] __io_uring_add_tctx_node+0x2c6/0x520 [ 2738.167380] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2738.168209] ? alloc_fd+0x2e7/0x670 [ 2738.168796] io_uring_setup+0x1fbb/0x2980 [ 2738.169464] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2738.170289] ? wait_for_completion_io+0x270/0x270 [ 2738.171083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2738.171924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2738.172738] do_syscall_64+0x33/0x40 [ 2738.173335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2738.174156] RIP: 0033:0x7f9c3da0ab19 [ 2738.174747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2738.177645] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2738.178861] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2738.179978] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2738.181101] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2738.182241] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2738.183370] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2738.191418] loop2: detected capacity change from 0 to 117768192 [ 2738.203798] FAT-fs (loop2): bogus number of reserved sectors [ 2738.205693] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2738.261553] loop2: detected capacity change from 0 to 117768192 [ 2738.283655] FAT-fs (loop2): bogus number of reserved sectors [ 2738.285106] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:24 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 48) 05:11:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x2005c8}], 0x7ffff000, 0x0) 05:11:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x8000000) 05:11:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) 05:11:24 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:11:24 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 63) [ 2753.417318] FAULT_INJECTION: forcing a failure. [ 2753.417318] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.419711] CPU: 1 PID: 13731 Comm: syz-executor.6 Not tainted 5.10.239 #1 05:11:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:11:24 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2753.421156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2753.423529] Call Trace: [ 2753.424260] dump_stack+0x107/0x167 [ 2753.425240] should_fail.cold+0x5/0xa [ 2753.426284] ? create_object.isra.0+0x3a/0xa20 [ 2753.427521] should_failslab+0x5/0x20 [ 2753.428545] kmem_cache_alloc+0x5b/0x310 [ 2753.429638] create_object.isra.0+0x3a/0xa20 [ 2753.430846] kmemleak_alloc_percpu+0xa0/0x100 [ 2753.432061] pcpu_alloc+0x4e2/0x1240 [ 2753.433086] __percpu_counter_init+0x10d/0x2d0 [ 2753.434328] io_uring_alloc_task_context+0xcc/0x6a0 [ 2753.435654] ? io_import_iovec+0x1120/0x1120 [ 2753.436831] ? lock_downgrade+0x6d0/0x6d0 [ 2753.437940] ? do_raw_spin_lock+0x121/0x260 [ 2753.439110] ? rwlock_bug.part.0+0x90/0x90 [ 2753.440253] __io_uring_add_tctx_node+0x2c6/0x520 [ 2753.441540] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2753.442942] ? alloc_fd+0x2e7/0x670 [ 2753.443931] io_uring_setup+0x1fbb/0x2980 [ 2753.445056] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2753.445070] loop2: detected capacity change from 0 to 134217728 [ 2753.447635] ? wait_for_completion_io+0x270/0x270 [ 2753.448661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2753.449755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2753.450853] do_syscall_64+0x33/0x40 [ 2753.451630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2753.452707] RIP: 0033:0x7f9c3da0ab19 [ 2753.453481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.457349] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2753.458726] FAULT_INJECTION: forcing a failure. [ 2753.458726] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.458940] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2753.458951] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2753.458961] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2753.458971] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2753.458982] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2753.472328] CPU: 0 PID: 13741 Comm: syz-executor.4 Not tainted 5.10.239 #1 [ 2753.474190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2753.476410] Call Trace: [ 2753.477188] dump_stack+0x107/0x167 [ 2753.478191] should_fail.cold+0x5/0xa [ 2753.479253] ? create_object.isra.0+0x3a/0xa20 [ 2753.480484] should_failslab+0x5/0x20 [ 2753.481506] kmem_cache_alloc+0x5b/0x310 [ 2753.482626] create_object.isra.0+0x3a/0xa20 [ 2753.483811] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2753.485170] kmem_cache_alloc_node+0x169/0x330 [ 2753.486427] copy_process+0x3301/0x78b0 [ 2753.487511] ? mark_lock+0xf5/0x2df0 [ 2753.488524] ? lock_acquire+0x197/0x470 [ 2753.489587] ? find_held_lock+0x2c/0x110 [ 2753.490702] ? __cleanup_sighand+0xb0/0xb0 [ 2753.491860] ? _copy_from_user+0xfb/0x1b0 [ 2753.492977] kernel_clone+0xe7/0x980 [ 2753.493975] ? lock_acquire+0x197/0x470 [ 2753.495055] ? create_io_thread+0xf0/0xf0 [ 2753.496181] ? ksys_write+0x21a/0x260 [ 2753.497209] ? lock_downgrade+0x6d0/0x6d0 [ 2753.498334] __do_sys_clone3+0x1e5/0x320 [ 2753.499423] ? __do_sys_clone+0x110/0x110 [ 2753.500554] ? rcu_read_lock_any_held+0x75/0xa0 [ 2753.501808] ? vfs_write+0x354/0xb10 [ 2753.502820] ? fput_many+0x2f/0x1a0 [ 2753.503804] ? ksys_write+0x1a9/0x260 [ 2753.504824] ? __ia32_sys_read+0xb0/0xb0 [ 2753.505916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2753.507336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2753.508497] ? trace_hardirqs_on+0x5b/0x180 [ 2753.509661] do_syscall_64+0x33/0x40 [ 2753.510681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2753.512062] RIP: 0033:0x7f46dc7f2b19 [ 2753.513060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.517930] RSP: 002b:00007f46d9d68188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2753.519677] RAX: ffffffffffffffda RBX: 00007f46dc905f60 RCX: 00007f46dc7f2b19 [ 2753.521362] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2753.522985] RBP: 00007f46d9d681d0 R08: 0000000000000000 R09: 0000000000000000 [ 2753.524576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2753.526193] R13: 00007ffd72f7f53f R14: 00007f46d9d68300 R15: 0000000000022000 [ 2753.532926] FAT-fs (loop2): bogus number of reserved sectors [ 2753.534285] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2753.544013] FAULT_INJECTION: forcing a failure. [ 2753.544013] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.546665] CPU: 1 PID: 13744 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2753.548166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2753.550078] Call Trace: [ 2753.550637] dump_stack+0x107/0x167 [ 2753.551407] should_fail.cold+0x5/0xa [ 2753.552206] ? create_object.isra.0+0x3a/0xa20 [ 2753.553164] should_failslab+0x5/0x20 [ 2753.553960] kmem_cache_alloc+0x5b/0x310 [ 2753.554832] ? mark_held_locks+0x9e/0xe0 [ 2753.555683] create_object.isra.0+0x3a/0xa20 [ 2753.556600] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2753.557665] kmem_cache_alloc+0x159/0x310 [ 2753.558550] xas_alloc+0x336/0x440 [ 2753.559294] xas_create+0x34a/0x10d0 [ 2753.560081] ? kernel_text_address+0xf2/0x120 [ 2753.561019] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2753.562125] xas_store+0x8c/0x1c40 [ 2753.562881] __xa_store+0x164/0x2d0 [ 2753.563643] ? xa_delete_node+0x280/0x280 [ 2753.564517] ? trace_hardirqs_on+0x5b/0x180 [ 2753.565422] xa_store+0x31/0x50 [ 2753.566134] __io_uring_add_tctx_node+0x1cf/0x520 [ 2753.567140] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2753.568230] ? alloc_fd+0x2e7/0x670 [ 2753.569000] io_uring_setup+0x1fbb/0x2980 [ 2753.569872] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2753.570932] ? wait_for_completion_io+0x270/0x270 [ 2753.572063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2753.573176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2753.574528] do_syscall_64+0x33/0x40 [ 2753.575498] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2753.576809] RIP: 0033:0x7f838ee79b19 [ 2753.577762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.582070] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2753.583788] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2753.585407] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 05:11:24 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 49) [ 2753.587026] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2753.588910] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2753.590534] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:11:24 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2753.619607] loop2: detected capacity change from 0 to 134217728 [ 2753.658590] FAT-fs (loop2): bogus number of reserved sectors [ 2753.659997] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:24 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:11:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8050000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2753.812976] FAULT_INJECTION: forcing a failure. [ 2753.812976] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.815735] CPU: 1 PID: 13759 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2753.817349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2753.819300] Call Trace: [ 2753.819920] dump_stack+0x107/0x167 [ 2753.820778] should_fail.cold+0x5/0xa [ 2753.821673] ? create_object.isra.0+0x3a/0xa20 [ 2753.822747] should_failslab+0x5/0x20 [ 2753.823625] kmem_cache_alloc+0x5b/0x310 [ 2753.824569] create_object.isra.0+0x3a/0xa20 [ 2753.825582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2753.826770] kmem_cache_alloc_trace+0x151/0x320 [ 2753.827858] io_uring_alloc_task_context+0x99/0x6a0 [ 2753.829009] ? io_import_iovec+0x1120/0x1120 [ 2753.830038] ? lock_downgrade+0x6d0/0x6d0 [ 2753.831007] ? do_raw_spin_lock+0x121/0x260 [ 2753.832000] ? rwlock_bug.part.0+0x90/0x90 [ 2753.832980] __io_uring_add_tctx_node+0x2c6/0x520 [ 2753.834100] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2753.835316] ? alloc_fd+0x2e7/0x670 [ 2753.836175] io_uring_setup+0x1fbb/0x2980 [ 2753.837142] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2753.838327] ? wait_for_completion_io+0x270/0x270 [ 2753.839466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2753.840683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2753.841881] do_syscall_64+0x33/0x40 [ 2753.842740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2753.843908] RIP: 0033:0x7f9c3da0ab19 05:11:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x9000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:11:24 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 64) [ 2753.844750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.849192] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2753.850932] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2753.852561] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2753.854186] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2753.855815] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2753.857423] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2753.926668] FAULT_INJECTION: forcing a failure. [ 2753.926668] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.929524] CPU: 0 PID: 13767 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2753.931237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2753.933268] Call Trace: [ 2753.933912] dump_stack+0x107/0x167 [ 2753.934823] should_fail.cold+0x5/0xa [ 2753.935761] ? create_object.isra.0+0x3a/0xa20 [ 2753.936884] should_failslab+0x5/0x20 [ 2753.937809] kmem_cache_alloc+0x5b/0x310 [ 2753.938802] ? mark_held_locks+0x9e/0xe0 [ 2753.939787] create_object.isra.0+0x3a/0xa20 [ 2753.940853] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2753.942095] kmem_cache_alloc+0x159/0x310 [ 2753.943109] xas_alloc+0x336/0x440 [ 2753.943981] xas_create+0x34a/0x10d0 [ 2753.944893] ? kernel_text_address+0xf2/0x120 [ 2753.945988] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2753.947283] xas_store+0x8c/0x1c40 [ 2753.948170] __xa_store+0x164/0x2d0 [ 2753.949063] ? xa_delete_node+0x280/0x280 [ 2753.950106] ? trace_hardirqs_on+0x5b/0x180 [ 2753.951166] xa_store+0x31/0x50 [ 2753.951974] __io_uring_add_tctx_node+0x1cf/0x520 [ 2753.953149] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2753.954437] ? alloc_fd+0x2e7/0x670 [ 2753.955341] io_uring_setup+0x1fbb/0x2980 [ 2753.956370] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2753.957603] ? wait_for_completion_io+0x270/0x270 [ 2753.958813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2753.960085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2753.961360] do_syscall_64+0x33/0x40 [ 2753.962269] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2753.963527] RIP: 0033:0x7f838ee79b19 [ 2753.964432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.968957] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2753.970812] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2753.972547] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2753.974292] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2753.976019] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2753.977754] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:11:25 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, 0x0) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:11:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x9050000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2754.110351] loop2: detected capacity change from 0 to 135266304 [ 2754.119403] FAT-fs (loop2): bogus number of reserved sectors [ 2754.120907] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2754.144949] loop2: detected capacity change from 0 to 135266304 [ 2754.150170] FAT-fs (loop2): bogus number of reserved sectors [ 2754.151688] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2769.273686] FAULT_INJECTION: forcing a failure. [ 2769.273686] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.275149] CPU: 1 PID: 13797 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2769.275992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2769.277008] Call Trace: [ 2769.277335] dump_stack+0x107/0x167 [ 2769.277778] should_fail.cold+0x5/0xa [ 2769.278249] ? io_wq_create+0xeb/0xc00 [ 2769.278722] should_failslab+0x5/0x20 [ 2769.279186] __kmalloc+0x72/0x390 [ 2769.279607] io_wq_create+0xeb/0xc00 [ 2769.280059] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2769.280671] ? io_import_iovec+0x1120/0x1120 [ 2769.281205] ? io_apoll_task_func+0x2d0/0x2d0 [ 2769.281742] ? __io_req_find_next+0x300/0x300 [ 2769.282285] ? do_raw_spin_lock+0x121/0x260 [ 2769.282801] ? rwlock_bug.part.0+0x90/0x90 [ 2769.283312] __io_uring_add_tctx_node+0x2c6/0x520 [ 2769.283887] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2769.284789] ? alloc_fd+0x2e7/0x670 [ 2769.285424] io_uring_setup+0x1fbb/0x2980 [ 2769.286071] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2769.286710] ? wait_for_completion_io+0x270/0x270 [ 2769.287311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2769.287950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2769.288588] do_syscall_64+0x33/0x40 [ 2769.289043] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2769.289653] RIP: 0033:0x7f9c3da0ab19 [ 2769.290107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2769.292319] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2769.293237] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2769.294095] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2769.294956] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2769.295810] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2769.296676] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2769.299940] FAULT_INJECTION: forcing a failure. [ 2769.299940] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.302702] CPU: 0 PID: 13793 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2769.304470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2769.306599] Call Trace: [ 2769.307233] dump_stack+0x107/0x167 [ 2769.308261] should_fail.cold+0x5/0xa [ 2769.309141] ? ___slab_alloc+0x155/0x700 [ 2769.310268] ? create_object.isra.0+0x3a/0xa20 [ 2769.311371] should_failslab+0x5/0x20 [ 2769.312412] kmem_cache_alloc+0x5b/0x310 [ 2769.313423] create_object.isra.0+0x3a/0xa20 [ 2769.314442] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2769.315883] kmem_cache_alloc+0x159/0x310 [ 2769.316850] xas_alloc+0x336/0x440 [ 2769.317667] xas_create+0x34a/0x10d0 [ 2769.318766] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2769.319969] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2769.321371] xas_store+0x8c/0x1c40 [ 2769.322271] __xa_store+0x164/0x2d0 [ 2769.323126] ? xa_delete_node+0x280/0x280 [ 2769.324178] ? trace_hardirqs_on+0x5b/0x180 [ 2769.325334] xa_store+0x31/0x50 [ 2769.326091] __io_uring_add_tctx_node+0x1cf/0x520 [ 2769.327242] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2769.328687] ? alloc_fd+0x2e7/0x670 [ 2769.329555] io_uring_setup+0x1fbb/0x2980 [ 2769.330528] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2769.331747] ? wait_for_completion_io+0x270/0x270 [ 2769.333080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2769.334384] ? syscall_enter_from_user_mode+0x1d/0x50 05:11:40 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 65) 05:11:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xa000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:11:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r0 = getpgid(0x0) move_pages(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000ffa000/0x3000)=nil], &(0x7f00000008c0), &(0x7f0000000900), 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_io_uring_setup(0x12a0, &(0x7f0000000000)={0x0, 0xc71d, 0x8, 0x3, 0x2c2, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 05:11:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200900}], 0x7ffff000, 0x0) 05:11:40 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40180004, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:11:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x9000000) 05:11:40 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, 0x0) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:11:40 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 50) [ 2769.335891] do_syscall_64+0x33/0x40 [ 2769.336827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2769.338238] RIP: 0033:0x7f838ee79b19 [ 2769.339096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2769.343725] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2769.345607] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2769.347262] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2769.348892] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2769.350542] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2769.352170] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2769.367216] loop2: detected capacity change from 0 to 135266304 [ 2769.380439] FAT-fs (loop2): bogus number of reserved sectors [ 2769.381864] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2769.397448] loop2: detected capacity change from 0 to 135266304 [ 2769.409574] FAT-fs (loop2): bogus number of reserved sectors 05:11:40 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, 0x0) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2769.410979] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:40 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 51) [ 2769.451353] FAULT_INJECTION: forcing a failure. [ 2769.451353] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.453954] CPU: 0 PID: 13815 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2769.455566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2769.457491] Call Trace: [ 2769.458111] dump_stack+0x107/0x167 [ 2769.458968] should_fail.cold+0x5/0xa [ 2769.459852] ? create_object.isra.0+0x3a/0xa20 [ 2769.460915] should_failslab+0x5/0x20 [ 2769.461791] kmem_cache_alloc+0x5b/0x310 [ 2769.462850] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 2769.464110] create_object.isra.0+0x3a/0xa20 [ 2769.465123] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2769.466312] __kmalloc+0x16e/0x390 [ 2769.467140] io_wq_create+0xeb/0xc00 [ 2769.468019] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2769.469204] ? io_import_iovec+0x1120/0x1120 [ 2769.470236] ? io_apoll_task_func+0x2d0/0x2d0 [ 2769.471272] ? __io_req_find_next+0x300/0x300 [ 2769.472303] ? do_raw_spin_lock+0x121/0x260 [ 2769.473301] ? rwlock_bug.part.0+0x90/0x90 [ 2769.474290] __io_uring_add_tctx_node+0x2c6/0x520 [ 2769.475411] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2769.476625] ? alloc_fd+0x2e7/0x670 [ 2769.477483] io_uring_setup+0x1fbb/0x2980 [ 2769.478462] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2769.479626] ? wait_for_completion_io+0x270/0x270 [ 2769.480762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2769.481980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2769.483185] do_syscall_64+0x33/0x40 [ 2769.484044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2769.485222] RIP: 0033:0x7f9c3da0ab19 [ 2769.486077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2769.490357] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2769.492114] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2769.493753] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2769.495408] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2769.497051] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2769.498707] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:11:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 05:11:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xb000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2769.555048] loop2: detected capacity change from 0 to 135266304 05:11:40 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2769.582712] FAT-fs (loop2): bogus number of reserved sectors [ 2769.583466] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:40 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 66) [ 2769.608100] loop2: detected capacity change from 0 to 135266304 05:11:40 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000818000000", @ANYRES32=r0, @ANYBLOB="30010000000000002e2f66696c653000"]) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000100)=""/96, 0x60}], 0x2) [ 2769.637602] FAT-fs (loop2): bogus number of reserved sectors [ 2769.638470] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:40 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 52) [ 2769.671180] FAULT_INJECTION: forcing a failure. [ 2769.671180] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.672656] CPU: 1 PID: 13832 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2769.673514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2769.674547] Call Trace: [ 2769.674883] dump_stack+0x107/0x167 [ 2769.675340] should_fail.cold+0x5/0xa [ 2769.675821] ? xas_alloc+0x336/0x440 [ 2769.676291] should_failslab+0x5/0x20 [ 2769.676766] kmem_cache_alloc+0x5b/0x310 [ 2769.677268] xas_alloc+0x336/0x440 [ 2769.677486] FAULT_INJECTION: forcing a failure. [ 2769.677486] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.677706] xas_create+0x34a/0x10d0 [ 2769.677724] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2769.677738] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2769.677758] xas_store+0x8c/0x1c40 [ 2769.682441] __xa_store+0x164/0x2d0 [ 2769.682895] ? xa_delete_node+0x280/0x280 [ 2769.683414] ? trace_hardirqs_on+0x5b/0x180 [ 2769.683956] xa_store+0x31/0x50 [ 2769.684368] __io_uring_add_tctx_node+0x1cf/0x520 [ 2769.684963] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2769.685608] ? alloc_fd+0x2e7/0x670 [ 2769.686069] io_uring_setup+0x1fbb/0x2980 [ 2769.686599] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2769.687220] ? wait_for_completion_io+0x270/0x270 [ 2769.687829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2769.688481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2769.689128] do_syscall_64+0x33/0x40 [ 2769.689594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2769.690240] RIP: 0033:0x7f838ee79b19 [ 2769.690703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2769.692991] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2769.693941] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2769.694835] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2769.695714] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2769.696593] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2769.697479] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2769.698404] CPU: 0 PID: 13836 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2769.700009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2769.701946] Call Trace: [ 2769.702569] dump_stack+0x107/0x167 [ 2769.703412] should_fail.cold+0x5/0xa [ 2769.704287] ? io_wq_create+0x6ef/0xc00 [ 2769.705200] should_failslab+0x5/0x20 [ 2769.706081] kmem_cache_alloc_node_trace+0x59/0x340 [ 2769.707239] io_wq_create+0x6ef/0xc00 [ 2769.708121] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2769.709281] ? io_import_iovec+0x1120/0x1120 [ 2769.710304] ? io_apoll_task_func+0x2d0/0x2d0 [ 2769.711339] ? __io_req_find_next+0x300/0x300 [ 2769.712368] ? do_raw_spin_lock+0x121/0x260 [ 2769.713355] ? rwlock_bug.part.0+0x90/0x90 [ 2769.714344] __io_uring_add_tctx_node+0x2c6/0x520 [ 2769.715457] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2769.716650] ? alloc_fd+0x2e7/0x670 [ 2769.717491] io_uring_setup+0x1fbb/0x2980 [ 2769.718469] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2769.719626] ? wait_for_completion_io+0x270/0x270 [ 2769.720754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2769.721959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2769.723152] do_syscall_64+0x33/0x40 [ 2769.724014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2769.725194] RIP: 0033:0x7f9c3da0ab19 [ 2769.726046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2769.730344] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2769.732113] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2769.733779] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2769.735462] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2769.737114] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2769.738788] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:11:40 executing program 7: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_vif\x00') r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x3f, 0x408102) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1, 0x1f, 0x0) 05:11:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xd000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:11:40 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2769.815978] loop2: detected capacity change from 0 to 135266304 [ 2769.829244] FAT-fs (loop2): bogus number of reserved sectors [ 2769.830843] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2769.881620] loop2: detected capacity change from 0 to 135266304 [ 2769.886774] FAT-fs (loop2): bogus number of reserved sectors [ 2769.887634] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:54 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 53) 05:11:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xa, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:11:54 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 67) 05:11:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xf000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:11:54 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:11:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200e00}], 0x7ffff000, 0x0) 05:11:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xe000000) 05:11:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182302, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2783.682323] FAULT_INJECTION: forcing a failure. [ 2783.682323] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.684073] CPU: 0 PID: 13868 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2783.685124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.686391] Call Trace: [ 2783.686790] dump_stack+0x107/0x167 [ 2783.687338] should_fail.cold+0x5/0xa [ 2783.687906] ? create_object.isra.0+0x3a/0xa20 [ 2783.688587] should_failslab+0x5/0x20 [ 2783.689153] kmem_cache_alloc+0x5b/0x310 [ 2783.689182] loop2: detected capacity change from 0 to 135266304 [ 2783.689757] ? mark_held_locks+0x9e/0xe0 [ 2783.689775] create_object.isra.0+0x3a/0xa20 [ 2783.692385] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2783.693155] kmem_cache_alloc+0x159/0x310 [ 2783.693783] xas_alloc+0x336/0x440 [ 2783.694323] xas_create+0x34a/0x10d0 [ 2783.694881] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2783.695631] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2783.696416] xas_store+0x8c/0x1c40 [ 2783.696956] __xa_store+0x164/0x2d0 [ 2783.697498] ? xa_delete_node+0x280/0x280 [ 2783.698120] ? trace_hardirqs_on+0x5b/0x180 [ 2783.698773] xa_store+0x31/0x50 [ 2783.699272] __io_uring_add_tctx_node+0x1cf/0x520 [ 2783.699990] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2783.700768] ? alloc_fd+0x2e7/0x670 [ 2783.701261] FAULT_INJECTION: forcing a failure. [ 2783.701261] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.701318] io_uring_setup+0x1fbb/0x2980 [ 2783.704431] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2783.705183] ? wait_for_completion_io+0x270/0x270 [ 2783.705919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2783.706708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2783.707476] do_syscall_64+0x33/0x40 [ 2783.708029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2783.708794] RIP: 0033:0x7f838ee79b19 [ 2783.709350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2783.712107] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2783.713241] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2783.714316] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2783.715378] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2783.716440] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2783.717513] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2783.718614] CPU: 1 PID: 13876 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2783.720192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.722063] Call Trace: [ 2783.722677] dump_stack+0x107/0x167 [ 2783.723499] should_fail.cold+0x5/0xa [ 2783.724362] ? create_object.isra.0+0x3a/0xa20 [ 2783.725395] should_failslab+0x5/0x20 [ 2783.726259] kmem_cache_alloc+0x5b/0x310 [ 2783.727182] ? io_wq_create+0x114/0xc00 [ 2783.728082] create_object.isra.0+0x3a/0xa20 [ 2783.729073] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2783.730239] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2783.731400] io_wq_create+0x6ef/0xc00 [ 2783.732267] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2783.733415] ? io_import_iovec+0x1120/0x1120 [ 2783.734421] ? io_apoll_task_func+0x2d0/0x2d0 [ 2783.735434] ? __io_req_find_next+0x300/0x300 [ 2783.736446] ? do_raw_spin_lock+0x121/0x260 [ 2783.737419] ? rwlock_bug.part.0+0x90/0x90 [ 2783.738391] __io_uring_add_tctx_node+0x2c6/0x520 [ 2783.739486] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2783.740664] ? alloc_fd+0x2e7/0x670 [ 2783.741496] io_uring_setup+0x1fbb/0x2980 [ 2783.742449] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2783.743591] ? wait_for_completion_io+0x270/0x270 [ 2783.744708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2783.745895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2783.747074] do_syscall_64+0x33/0x40 [ 2783.747910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2783.749065] RIP: 0033:0x7f9c3da0ab19 [ 2783.749904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2783.754068] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2783.755791] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2783.757404] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2783.759027] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2783.760637] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2783.762240] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2783.769684] FAT-fs (loop2): bogus number of reserved sectors [ 2783.770650] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2783.793096] loop2: detected capacity change from 0 to 135266304 [ 2783.796331] FAT-fs (loop2): bogus number of reserved sectors [ 2783.797344] FAT-fs (loop2): Can't find a valid FAT filesystem 05:11:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:11:54 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 54) [ 2783.854456] FAULT_INJECTION: forcing a failure. [ 2783.854456] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.857065] CPU: 1 PID: 13884 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2783.858639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.860527] Call Trace: [ 2783.861124] dump_stack+0x107/0x167 [ 2783.861947] should_fail.cold+0x5/0xa [ 2783.862817] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2783.863951] should_failslab+0x5/0x20 [ 2783.864812] kmem_cache_alloc_trace+0x55/0x320 [ 2783.865855] __io_uring_add_tctx_node+0x15c/0x520 [ 2783.866957] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2783.868135] ? alloc_fd+0x2e7/0x670 [ 2783.868964] io_uring_setup+0x1fbb/0x2980 [ 2783.869914] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2783.871073] ? wait_for_completion_io+0x270/0x270 [ 2783.872186] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2783.873373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2783.874552] do_syscall_64+0x33/0x40 [ 2783.875401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2783.876559] RIP: 0033:0x7f9c3da0ab19 [ 2783.877402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2783.881570] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2783.883315] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2783.884930] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2783.886547] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2783.888160] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2783.889776] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:11:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x10000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:11:54 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:11:54 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 68) [ 2783.959967] loop2: detected capacity change from 0 to 135266304 [ 2783.969375] FAT-fs (loop2): bogus number of reserved sectors [ 2783.970868] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2783.974438] FAULT_INJECTION: forcing a failure. [ 2783.974438] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.977376] CPU: 1 PID: 13892 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2783.979079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.980994] Call Trace: [ 2783.981605] dump_stack+0x107/0x167 [ 2783.982463] should_fail.cold+0x5/0xa [ 2783.983356] ? xas_alloc+0x336/0x440 [ 2783.984219] should_failslab+0x5/0x20 [ 2783.985105] kmem_cache_alloc+0x5b/0x310 [ 2783.986047] xas_alloc+0x336/0x440 [ 2783.986882] xas_create+0x34a/0x10d0 [ 2783.987752] ? kernel_text_address+0xf2/0x120 [ 2783.988786] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2783.989995] xas_store+0x8c/0x1c40 [ 2783.990842] __xa_store+0x164/0x2d0 [ 2783.991686] ? xa_delete_node+0x280/0x280 [ 2783.992652] ? trace_hardirqs_on+0x5b/0x180 [ 2783.993647] xa_store+0x31/0x50 [ 2783.994422] __io_uring_add_tctx_node+0x1cf/0x520 [ 2783.995548] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2783.996755] ? alloc_fd+0x2e7/0x670 [ 2783.997611] io_uring_setup+0x1fbb/0x2980 [ 2783.998591] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2783.999755] ? wait_for_completion_io+0x270/0x270 [ 2784.000881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.002083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2784.003281] do_syscall_64+0x33/0x40 [ 2784.004133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2784.005308] RIP: 0033:0x7f838ee79b19 [ 2784.006166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.010391] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2784.012142] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2784.013769] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2784.015423] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2784.017047] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2784.018682] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:11:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r0 = syz_io_uring_complete(0x0) recvmsg$unix(r0, &(0x7f0000001580)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001440)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x120}, 0x0) recvmsg$unix(r1, &(0x7f0000002b80)={&(0x7f00000016c0)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001740)=""/135, 0x87}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/35, 0x23}, {&(0x7f0000002840)=""/130, 0x82}, {&(0x7f0000002900)=""/227, 0xe3}], 0x5, &(0x7f0000002a80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x1021) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002bc0), 0x141400) preadv(r3, &(0x7f0000002c00), 0x0, 0x5, 0x240) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r5, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x20000000) 05:11:55 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 55) 05:11:55 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2784.151341] FAULT_INJECTION: forcing a failure. [ 2784.151341] name failslab, interval 1, probability 0, space 0, times 0 [ 2784.154135] CPU: 0 PID: 13898 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2784.155856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2784.157896] Call Trace: [ 2784.158556] dump_stack+0x107/0x167 [ 2784.159448] should_fail.cold+0x5/0xa [ 2784.160379] ? create_object.isra.0+0x3a/0xa20 [ 2784.161494] should_failslab+0x5/0x20 [ 2784.162439] kmem_cache_alloc+0x5b/0x310 [ 2784.163438] create_object.isra.0+0x3a/0xa20 [ 2784.164508] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2784.165755] kmem_cache_alloc_trace+0x151/0x320 [ 2784.166911] __io_uring_add_tctx_node+0x15c/0x520 [ 2784.168094] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2784.169373] ? alloc_fd+0x2e7/0x670 [ 2784.170295] io_uring_setup+0x1fbb/0x2980 [ 2784.171317] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2784.172553] ? wait_for_completion_io+0x270/0x270 [ 2784.173754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.175044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2784.176311] do_syscall_64+0x33/0x40 [ 2784.177229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2784.178491] RIP: 0033:0x7f9c3da0ab19 [ 2784.179396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.183913] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2784.185780] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2784.187527] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2784.189272] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2784.191026] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2784.192763] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:11:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182303, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:11:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x11000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:11:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14002, 0x0, 0x0, 0x0, 0x35b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:11:55 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 56) [ 2784.416355] loop2: detected capacity change from 0 to 135266304 [ 2784.423543] FAULT_INJECTION: forcing a failure. [ 2784.423543] name failslab, interval 1, probability 0, space 0, times 0 [ 2784.425933] CPU: 1 PID: 13915 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2784.427439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2784.429184] Call Trace: [ 2784.429742] dump_stack+0x107/0x167 [ 2784.430532] should_fail.cold+0x5/0xa [ 2784.431335] ? xas_alloc+0x336/0x440 [ 2784.432124] should_failslab+0x5/0x20 [ 2784.432917] kmem_cache_alloc+0x5b/0x310 [ 2784.433802] ? stack_trace_consume_entry+0x160/0x160 [ 2784.434906] xas_alloc+0x336/0x440 [ 2784.435673] xas_create+0x34a/0x10d0 [ 2784.436485] ? kernel_text_address+0xf2/0x120 [ 2784.437449] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2784.438588] xas_store+0x8c/0x1c40 [ 2784.439368] __xa_store+0x164/0x2d0 [ 2784.440155] ? xa_delete_node+0x280/0x280 [ 2784.441062] ? trace_hardirqs_on+0x5b/0x180 [ 2784.441963] xa_store+0x31/0x50 [ 2784.442679] __io_uring_add_tctx_node+0x1cf/0x520 [ 2784.443708] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2784.444836] ? alloc_fd+0x2e7/0x670 [ 2784.445646] io_uring_setup+0x1fbb/0x2980 [ 2784.446548] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2784.447633] ? wait_for_completion_io+0x270/0x270 [ 2784.448688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.449812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2784.450937] do_syscall_64+0x33/0x40 [ 2784.451750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2784.452855] RIP: 0033:0x7f9c3da0ab19 [ 2784.453661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.457667] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2784.459349] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2784.460896] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2784.462474] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2784.464050] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2784.465626] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2784.499474] FAT-fs (loop2): bogus number of reserved sectors [ 2784.500950] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2784.541387] loop2: detected capacity change from 0 to 135266304 [ 2784.551978] FAT-fs (loop2): bogus number of reserved sectors [ 2784.553335] FAT-fs (loop2): Can't find a valid FAT filesystem 05:12:10 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 69) 05:12:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x201100}], 0x7ffff000, 0x0) 05:12:10 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 57) 05:12:10 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:12:10 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182304, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:12:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4cf}}, './file0\x00'}) openat(r2, &(0x7f0000000040)='./file0\x00', 0x49800, 0x302) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 05:12:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x12010000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:12:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x11000000) [ 2799.792590] FAULT_INJECTION: forcing a failure. [ 2799.792590] name failslab, interval 1, probability 0, space 0, times 0 [ 2799.795790] CPU: 0 PID: 13945 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2799.797663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2799.799912] Call Trace: [ 2799.800632] dump_stack+0x107/0x167 [ 2799.801621] should_fail.cold+0x5/0xa [ 2799.802668] ? create_object.isra.0+0x3a/0xa20 [ 2799.802870] loop2: detected capacity change from 0 to 135266304 [ 2799.803923] should_failslab+0x5/0x20 [ 2799.803953] kmem_cache_alloc+0x5b/0x310 [ 2799.806994] create_object.isra.0+0x3a/0xa20 [ 2799.807992] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2799.809137] kmem_cache_alloc+0x159/0x310 [ 2799.810082] xas_alloc+0x336/0x440 [ 2799.810901] xas_create+0x34a/0x10d0 [ 2799.811754] ? kernel_text_address+0xf2/0x120 [ 2799.812774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2799.813961] xas_store+0x8c/0x1c40 [ 2799.814790] __xa_store+0x164/0x2d0 [ 2799.815614] ? xa_delete_node+0x280/0x280 [ 2799.816554] ? trace_hardirqs_on+0x5b/0x180 [ 2799.817540] xa_store+0x31/0x50 [ 2799.818291] __io_uring_add_tctx_node+0x1cf/0x520 [ 2799.819385] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2799.820577] ? alloc_fd+0x2e7/0x670 [ 2799.821433] io_uring_setup+0x1fbb/0x2980 [ 2799.822391] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2799.823555] ? wait_for_completion_io+0x270/0x270 [ 2799.824687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2799.825898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2799.827093] do_syscall_64+0x33/0x40 [ 2799.827941] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2799.829105] RIP: 0033:0x7f9c3da0ab19 [ 2799.829944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2799.834153] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2799.835898] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2799.837478] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2799.839070] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2799.840653] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2799.842223] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2799.844399] FAT-fs (loop2): bogus number of reserved sectors [ 2799.845432] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2799.860660] FAULT_INJECTION: forcing a failure. [ 2799.860660] name failslab, interval 1, probability 0, space 0, times 0 [ 2799.863251] CPU: 0 PID: 13942 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2799.864795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2799.866633] Call Trace: [ 2799.867218] dump_stack+0x107/0x167 [ 2799.868025] should_fail.cold+0x5/0xa [ 2799.868868] ? create_object.isra.0+0x3a/0xa20 [ 2799.869872] should_failslab+0x5/0x20 [ 2799.870727] kmem_cache_alloc+0x5b/0x310 [ 2799.871626] ? mark_held_locks+0x9e/0xe0 [ 2799.872525] create_object.isra.0+0x3a/0xa20 [ 2799.873488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2799.874641] kmem_cache_alloc+0x159/0x310 [ 2799.875559] xas_alloc+0x336/0x440 [ 2799.876351] xas_create+0x34a/0x10d0 [ 2799.877185] ? kernel_text_address+0xf2/0x120 [ 2799.878169] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2799.879352] xas_store+0x8c/0x1c40 [ 2799.880150] __xa_store+0x164/0x2d0 [ 2799.880945] ? xa_delete_node+0x280/0x280 [ 2799.881855] ? trace_hardirqs_on+0x5b/0x180 [ 2799.882816] xa_store+0x31/0x50 [ 2799.883538] __io_uring_add_tctx_node+0x1cf/0x520 [ 2799.884595] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2799.885752] ? alloc_fd+0x2e7/0x670 [ 2799.886596] io_uring_setup+0x1fbb/0x2980 [ 2799.887532] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2799.888660] ? wait_for_completion_io+0x270/0x270 [ 2799.889765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2799.890996] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2799.892173] do_syscall_64+0x33/0x40 [ 2799.893009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2799.894157] RIP: 0033:0x7f838ee79b19 [ 2799.895014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2799.899171] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2799.900892] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2799.902512] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2799.904096] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2799.905682] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2799.907298] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:12:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x13300000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:12:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r4 = syz_open_procfs$userns(r1, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0xd4, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x94}, 0x800) syz_io_uring_setup(0x4d50, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r5, r6, 0x0, 0x1d3) syz_io_uring_setup(0x44d50, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r7, r8, 0x0, 0x1d3) syz_io_uring_submit(r5, r8, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0xfffffffd) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0xe6, 0xc, 0x1, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x10000, 0x2, 0x420, 0x5, 0x1, 0x401, 0x81, 0x0, 0x41f, 0x0, 0xaf4b}, r1, 0x9, 0xffffffffffffffff, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:12:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x15300000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:12:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x30000000) 05:12:26 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182305, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2815.620662] FAULT_INJECTION: forcing a failure. [ 2815.620662] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.623190] CPU: 0 PID: 13975 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2815.624640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.626364] Call Trace: [ 2815.626929] dump_stack+0x107/0x167 [ 2815.627686] should_fail.cold+0x5/0xa [ 2815.628487] ? xas_alloc+0x336/0x440 [ 2815.629280] should_failslab+0x5/0x20 [ 2815.630078] kmem_cache_alloc+0x5b/0x310 [ 2815.630940] xas_alloc+0x336/0x440 [ 2815.631688] xas_create+0x34a/0x10d0 [ 2815.632494] ? kernel_text_address+0xf2/0x120 [ 2815.633442] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2815.634531] xas_store+0x8c/0x1c40 05:12:26 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 70) 05:12:26 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, 0x0, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2815.635299] __xa_store+0x164/0x2d0 [ 2815.636271] ? xa_delete_node+0x280/0x280 [ 2815.637158] ? trace_hardirqs_on+0x5b/0x180 [ 2815.638064] xa_store+0x31/0x50 [ 2815.638762] __io_uring_add_tctx_node+0x1cf/0x520 [ 2815.639776] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2815.640868] ? alloc_fd+0x2e7/0x670 [ 2815.641569] loop2: detected capacity change from 0 to 135266304 [ 2815.641634] io_uring_setup+0x1fbb/0x2980 [ 2815.643949] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2815.645010] ? wait_for_completion_io+0x270/0x270 [ 2815.646032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2815.647126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2815.648206] do_syscall_64+0x33/0x40 [ 2815.648988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2815.650048] RIP: 0033:0x7f838ee79b19 [ 2815.650819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.652636] FAULT_INJECTION: forcing a failure. 05:12:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x4000000000000000}, 0x10}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000002c0)=ANY=[@ANYBLOB="010008000000000000ff00000000", @ANYRES32=r1, @ANYBLOB="000000e0ff0099c8fe37ffe412f2e85164cf4049d15d34c9b591da0f37cadef9268c86e8856e018cdf42ccbeae31f77ca48e1f6fec2103f7cc09f87b571f953794fa8e508b7733d68a15b4725c6f4a068de438b204dec3ebf37e1856b02b61fb836395768a7f1290b7c602c2566350f261378c44a1d2b9af0835df82c86f9e5a42ef4640830c4616c58ecaecbc2c355825e4a213675cc4fcdae26bca7ec115fa89f79a524b7a86c5ae9349be"]) 05:12:26 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 58) 05:12:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x202000}], 0x7ffff000, 0x0) [ 2815.652636] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.654654] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2815.654673] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2815.654684] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2815.654694] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2815.654704] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2815.654714] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2815.667929] CPU: 1 PID: 13982 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2815.669587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.671557] Call Trace: [ 2815.672173] dump_stack+0x107/0x167 [ 2815.673016] should_fail.cold+0x5/0xa [ 2815.673907] ? xas_alloc+0x336/0x440 [ 2815.674811] should_failslab+0x5/0x20 [ 2815.675697] kmem_cache_alloc+0x5b/0x310 [ 2815.676649] xas_alloc+0x336/0x440 [ 2815.677478] xas_create+0x34a/0x10d0 [ 2815.678355] ? kernel_text_address+0xf2/0x120 [ 2815.679415] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2815.680611] xas_store+0x8c/0x1c40 [ 2815.681442] __xa_store+0x164/0x2d0 [ 2815.682290] ? xa_delete_node+0x280/0x280 [ 2815.683287] ? trace_hardirqs_on+0x5b/0x180 [ 2815.684284] xa_store+0x31/0x50 [ 2815.685068] __io_uring_add_tctx_node+0x1cf/0x520 [ 2815.686218] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2815.687484] ? alloc_fd+0x2e7/0x670 [ 2815.688353] io_uring_setup+0x1fbb/0x2980 [ 2815.689342] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2815.690549] ? wait_for_completion_io+0x270/0x270 [ 2815.691753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2815.693013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2815.694241] do_syscall_64+0x33/0x40 [ 2815.695185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2815.696429] RIP: 0033:0x7f9c3da0ab19 [ 2815.697325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.701768] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2815.703570] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2815.705221] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2815.706919] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2815.708550] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2815.710218] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2815.713485] FAT-fs (loop2): bogus number of reserved sectors [ 2815.714597] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2815.734059] loop2: detected capacity change from 0 to 135266304 05:12:26 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 59) [ 2815.754327] FAT-fs (loop2): bogus number of reserved sectors [ 2815.755371] FAT-fs (loop2): Can't find a valid FAT filesystem 05:12:26 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') [ 2815.792664] FAULT_INJECTION: forcing a failure. [ 2815.792664] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.795181] CPU: 1 PID: 13992 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2815.796649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.798421] Call Trace: [ 2815.799009] dump_stack+0x107/0x167 [ 2815.799797] should_fail.cold+0x5/0xa [ 2815.800605] ? create_object.isra.0+0x3a/0xa20 [ 2815.801576] should_failslab+0x5/0x20 [ 2815.802380] kmem_cache_alloc+0x5b/0x310 [ 2815.803282] ? mark_held_locks+0x9e/0xe0 [ 2815.804145] create_object.isra.0+0x3a/0xa20 [ 2815.805072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2815.806155] kmem_cache_alloc+0x159/0x310 [ 2815.807072] xas_alloc+0x336/0x440 [ 2815.807833] xas_create+0x34a/0x10d0 [ 2815.808631] ? kernel_text_address+0xf2/0x120 [ 2815.809586] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2815.810723] xas_store+0x8c/0x1c40 [ 2815.811503] __xa_store+0x164/0x2d0 [ 2815.812284] ? xa_delete_node+0x280/0x280 [ 2815.813168] ? trace_hardirqs_on+0x5b/0x180 [ 2815.814086] xa_store+0x31/0x50 [ 2815.814809] __io_uring_add_tctx_node+0x1cf/0x520 [ 2815.815841] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2815.816947] ? alloc_fd+0x2e7/0x670 [ 2815.817726] io_uring_setup+0x1fbb/0x2980 [ 2815.818628] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2815.819719] ? wait_for_completion_io+0x270/0x270 [ 2815.820741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2815.821835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2815.822988] do_syscall_64+0x33/0x40 [ 2815.823794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2815.824897] RIP: 0033:0x7f9c3da0ab19 [ 2815.825701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.829708] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2815.831354] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2815.832875] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2815.834411] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2815.835987] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2815.837518] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:12:26 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, 0x0, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:12:26 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 60) 05:12:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x17300000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2815.936498] FAULT_INJECTION: forcing a failure. [ 2815.936498] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.938527] CPU: 0 PID: 13999 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2815.939743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.941199] Call Trace: [ 2815.941665] dump_stack+0x107/0x167 [ 2815.942393] should_fail.cold+0x5/0xa [ 2815.943148] ? xas_alloc+0x336/0x440 [ 2815.943800] should_failslab+0x5/0x20 [ 2815.944459] kmem_cache_alloc+0x5b/0x310 [ 2815.945180] xas_alloc+0x336/0x440 [ 2815.945806] xas_create+0x34a/0x10d0 [ 2815.946463] ? kernel_text_address+0xf2/0x120 [ 2815.947249] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2815.948160] xas_store+0x8c/0x1c40 [ 2815.948797] __xa_store+0x164/0x2d0 [ 2815.949426] ? xa_delete_node+0x280/0x280 [ 2815.950143] ? trace_hardirqs_on+0x5b/0x180 [ 2815.950905] xa_store+0x31/0x50 [ 2815.951490] __io_uring_add_tctx_node+0x1cf/0x520 [ 2815.952330] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2815.953235] ? alloc_fd+0x2e7/0x670 [ 2815.953870] io_uring_setup+0x1fbb/0x2980 [ 2815.954601] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2815.955488] ? wait_for_completion_io+0x270/0x270 [ 2815.956336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2815.957244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2815.958137] do_syscall_64+0x33/0x40 [ 2815.958785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2815.959691] RIP: 0033:0x7f9c3da0ab19 [ 2815.960335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.963567] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2815.965004] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2815.966246] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2815.967538] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2815.968800] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2815.970051] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:12:27 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 71) 05:12:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1f270400, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:12:27 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, 0x0, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2816.066234] FAULT_INJECTION: forcing a failure. [ 2816.066234] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.068712] CPU: 1 PID: 14006 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2816.070165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2816.071974] Call Trace: [ 2816.072540] dump_stack+0x107/0x167 [ 2816.073324] should_fail.cold+0x5/0xa [ 2816.074144] ? create_object.isra.0+0x3a/0xa20 [ 2816.075158] should_failslab+0x5/0x20 [ 2816.075953] kmem_cache_alloc+0x5b/0x310 [ 2816.076793] ? mark_held_locks+0x9e/0xe0 [ 2816.077658] create_object.isra.0+0x3a/0xa20 [ 2816.078605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2816.079697] kmem_cache_alloc+0x159/0x310 [ 2816.080578] xas_alloc+0x336/0x440 [ 2816.081336] xas_create+0x34a/0x10d0 [ 2816.082136] ? kernel_text_address+0xf2/0x120 [ 2816.083119] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2816.084213] xas_store+0x8c/0x1c40 [ 2816.084973] __xa_store+0x164/0x2d0 [ 2816.085733] ? xa_delete_node+0x280/0x280 [ 2816.086620] ? trace_hardirqs_on+0x5b/0x180 [ 2816.087560] xa_store+0x31/0x50 [ 2816.088273] __io_uring_add_tctx_node+0x1cf/0x520 [ 2816.089273] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2816.090380] ? alloc_fd+0x2e7/0x670 [ 2816.091194] io_uring_setup+0x1fbb/0x2980 [ 2816.092087] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2816.093156] ? wait_for_completion_io+0x270/0x270 [ 2816.094195] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2816.095346] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2816.096434] do_syscall_64+0x33/0x40 [ 2816.097216] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2816.098308] RIP: 0033:0x7f838ee79b19 [ 2816.099132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.103100] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2816.104736] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2816.106262] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2816.107802] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2816.109330] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2816.110889] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:12:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:12:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x20000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:12:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x203000}], 0x7ffff000, 0x0) 05:12:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x31000000) 05:12:40 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:12:40 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182306, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:12:40 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 72) 05:12:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x5, 0x3f, 0x9, 0x0, 0x80000001, 0xe4808, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe9, 0x0, @perf_config_ext={0xc3f, 0x1}, 0x1002, 0x4, 0x10001, 0x7, 0x100000000, 0x3ff, 0x0, 0x0, 0x20}, 0x0, 0x1, 0xffffffffffffffff, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:12:40 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 61) [ 2829.892551] FAULT_INJECTION: forcing a failure. [ 2829.892551] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.894071] CPU: 0 PID: 14030 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2829.894962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.895992] Call Trace: [ 2829.896331] dump_stack+0x107/0x167 [ 2829.896793] should_fail.cold+0x5/0xa [ 2829.897276] ? xas_alloc+0x336/0x440 [ 2829.897754] should_failslab+0x5/0x20 [ 2829.898237] kmem_cache_alloc+0x5b/0x310 [ 2829.898771] xas_alloc+0x336/0x440 [ 2829.899230] xas_create+0x34a/0x10d0 [ 2829.899705] ? kernel_text_address+0xf2/0x120 [ 2829.900272] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.900930] xas_store+0x8c/0x1c40 [ 2829.901386] __xa_store+0x164/0x2d0 [ 2829.901852] ? xa_delete_node+0x280/0x280 [ 2829.902387] ? trace_hardirqs_on+0x5b/0x180 [ 2829.902965] xa_store+0x31/0x50 [ 2829.903380] __io_uring_add_tctx_node+0x1cf/0x520 [ 2829.903980] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2829.904629] ? alloc_fd+0x2e7/0x670 [ 2829.905095] io_uring_setup+0x1fbb/0x2980 [ 2829.905621] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2829.906244] ? wait_for_completion_io+0x270/0x270 [ 2829.906871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.907524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.908161] do_syscall_64+0x33/0x40 [ 2829.908619] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.909247] RIP: 0033:0x7f838ee79b19 [ 2829.909715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.912001] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2829.912950] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2829.913829] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2829.914720] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2829.915636] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2829.916508] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2829.930371] FAULT_INJECTION: forcing a failure. [ 2829.930371] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.932880] CPU: 1 PID: 14040 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2829.934345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.936165] Call Trace: [ 2829.936738] dump_stack+0x107/0x167 [ 2829.937547] should_fail.cold+0x5/0xa [ 2829.938379] ? create_object.isra.0+0x3a/0xa20 [ 2829.939388] should_failslab+0x5/0x20 [ 2829.940205] kmem_cache_alloc+0x5b/0x310 [ 2829.941097] ? mark_held_locks+0x9e/0xe0 [ 2829.941964] create_object.isra.0+0x3a/0xa20 [ 2829.942932] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.944046] kmem_cache_alloc+0x159/0x310 [ 2829.944937] xas_alloc+0x336/0x440 [ 2829.945724] xas_create+0x34a/0x10d0 [ 2829.946542] ? kernel_text_address+0xf2/0x120 [ 2829.947535] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2829.948683] xas_store+0x8c/0x1c40 [ 2829.949480] __xa_store+0x164/0x2d0 [ 2829.950283] ? xa_delete_node+0x280/0x280 [ 2829.951195] ? trace_hardirqs_on+0x5b/0x180 [ 2829.952143] xa_store+0x31/0x50 [ 2829.952855] __io_uring_add_tctx_node+0x1cf/0x520 [ 2829.953921] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2829.955080] ? alloc_fd+0x2e7/0x670 [ 2829.955877] io_uring_setup+0x1fbb/0x2980 [ 2829.956798] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2829.957907] ? wait_for_completion_io+0x270/0x270 [ 2829.959038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.960177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.961300] do_syscall_64+0x33/0x40 [ 2829.962112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.963236] RIP: 0033:0x7f9c3da0ab19 [ 2829.964057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.968054] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2829.969720] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2829.971280] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2829.972826] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2829.974382] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2829.975921] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:12:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x208202, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r0, 0x406, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') [ 2830.006022] loop2: detected capacity change from 0 to 135266304 05:12:41 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 73) [ 2830.030121] FAT-fs (loop2): bogus number of reserved sectors [ 2830.031538] FAT-fs (loop2): Can't find a valid FAT filesystem 05:12:41 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2830.063435] FAULT_INJECTION: forcing a failure. [ 2830.063435] name failslab, interval 1, probability 0, space 0, times 0 [ 2830.064943] CPU: 0 PID: 14050 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2830.065804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2830.066860] Call Trace: [ 2830.067206] dump_stack+0x107/0x167 [ 2830.067665] should_fail.cold+0x5/0xa [ 2830.068163] ? create_object.isra.0+0x3a/0xa20 [ 2830.068735] should_failslab+0x5/0x20 [ 2830.069230] kmem_cache_alloc+0x5b/0x310 [ 2830.069739] ? mark_held_locks+0x9e/0xe0 [ 2830.070269] create_object.isra.0+0x3a/0xa20 [ 2830.070842] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2830.071488] kmem_cache_alloc+0x159/0x310 [ 2830.072011] xas_alloc+0x336/0x440 [ 2830.072457] xas_create+0x34a/0x10d0 [ 2830.072944] ? kernel_text_address+0xf2/0x120 [ 2830.073517] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2830.074172] xas_store+0x8c/0x1c40 [ 2830.074629] __xa_store+0x164/0x2d0 [ 2830.075121] ? xa_delete_node+0x280/0x280 [ 2830.075636] ? trace_hardirqs_on+0x5b/0x180 [ 2830.076193] xa_store+0x31/0x50 [ 2830.076609] __io_uring_add_tctx_node+0x1cf/0x520 [ 2830.077215] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2830.077868] ? alloc_fd+0x2e7/0x670 [ 2830.078342] io_uring_setup+0x1fbb/0x2980 [ 2830.078864] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2830.079493] ? wait_for_completion_io+0x270/0x270 [ 2830.080105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2830.080769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2830.081414] do_syscall_64+0x33/0x40 [ 2830.081875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2830.082495] RIP: 0033:0x7f838ee79b19 [ 2830.082993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2830.085236] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2830.086151] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2830.087032] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2830.087889] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2830.088752] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2830.089608] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2830.090782] loop2: detected capacity change from 0 to 135266304 [ 2830.107908] FAT-fs (loop2): bogus number of reserved sectors [ 2830.108659] FAT-fs (loop2): Can't find a valid FAT filesystem 05:12:41 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 62) [ 2830.205618] FAULT_INJECTION: forcing a failure. [ 2830.205618] name failslab, interval 1, probability 0, space 0, times 0 [ 2830.207056] CPU: 0 PID: 14057 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2830.207895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2830.208888] Call Trace: [ 2830.209210] dump_stack+0x107/0x167 [ 2830.209657] should_fail.cold+0x5/0xa [ 2830.210117] ? xas_alloc+0x336/0x440 [ 2830.210567] should_failslab+0x5/0x20 [ 2830.211044] kmem_cache_alloc+0x5b/0x310 [ 2830.211538] xas_alloc+0x336/0x440 [ 2830.211977] xas_create+0x34a/0x10d0 [ 2830.212429] ? kernel_text_address+0xf2/0x120 [ 2830.212980] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2830.213613] xas_store+0x8c/0x1c40 [ 2830.214047] __xa_store+0x164/0x2d0 [ 2830.214488] ? xa_delete_node+0x280/0x280 [ 2830.215001] ? trace_hardirqs_on+0x5b/0x180 [ 2830.215525] xa_store+0x31/0x50 [ 2830.215923] __io_uring_add_tctx_node+0x1cf/0x520 [ 2830.216500] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2830.217126] ? alloc_fd+0x2e7/0x670 [ 2830.217569] io_uring_setup+0x1fbb/0x2980 [ 2830.218068] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2830.218675] ? wait_for_completion_io+0x270/0x270 [ 2830.219269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2830.219902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2830.220519] do_syscall_64+0x33/0x40 [ 2830.220968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2830.221579] RIP: 0033:0x7f9c3da0ab19 [ 2830.222024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2830.224234] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2830.225155] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2830.226007] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2830.226866] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2830.227719] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2830.228570] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:12:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') fcntl$setstatus(r0, 0x4, 0x42000) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@delsa={0x4c, 0x11, 0x20, 0x70bd2c, 0x25dfdbfb, {@in=@broadcast, 0x4d6, 0x2, 0x32}, [@lifetime_val={0x24, 0x9, {0x7f, 0x6, 0x19b, 0x10001}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 05:12:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x20100000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:12:41 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:12:41 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 74) [ 2830.330910] FAULT_INJECTION: forcing a failure. [ 2830.330910] name failslab, interval 1, probability 0, space 0, times 0 [ 2830.333401] CPU: 1 PID: 14067 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2830.334888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2830.336668] Call Trace: [ 2830.337248] dump_stack+0x107/0x167 [ 2830.338023] should_fail.cold+0x5/0xa [ 2830.338838] ? xas_alloc+0x336/0x440 [ 2830.339654] should_failslab+0x5/0x20 [ 2830.340492] kmem_cache_alloc+0x5b/0x310 [ 2830.341380] xas_alloc+0x336/0x440 [ 2830.342160] xas_create+0x34a/0x10d0 [ 2830.342987] ? kernel_text_address+0xf2/0x120 [ 2830.343967] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2830.345120] xas_store+0x8c/0x1c40 [ 2830.345912] __xa_store+0x164/0x2d0 [ 2830.346707] ? xa_delete_node+0x280/0x280 [ 2830.347635] ? trace_hardirqs_on+0x5b/0x180 [ 2830.348582] xa_store+0x31/0x50 [ 2830.349290] __io_uring_add_tctx_node+0x1cf/0x520 [ 2830.350309] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2830.351413] ? alloc_fd+0x2e7/0x670 [ 2830.352200] io_uring_setup+0x1fbb/0x2980 [ 2830.353113] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2830.354215] ? wait_for_completion_io+0x270/0x270 [ 2830.355276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2830.356393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2830.357501] do_syscall_64+0x33/0x40 [ 2830.358288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2830.359389] RIP: 0033:0x7f838ee79b19 [ 2830.360185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2830.364082] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2830.365686] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2830.367205] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2830.368726] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2830.370232] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2830.371756] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:12:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x40000000) 05:12:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x203100}], 0x7ffff000, 0x0) 05:12:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x20270400, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:12:55 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 63) 05:12:55 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:12:55 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = signalfd4(r0, &(0x7f0000000040)={[0x7]}, 0x8, 0x80000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x80000000, 0xa6, 0x7, 0x8}) syz_io_uring_setup(0x4d50, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x1d3) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3800002, 0x10, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r1, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x200, 0x400, 0x1}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0xb9d948608adb58ad}, 0x0, 0xf, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:12:55 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 75) 05:12:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182307, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) [ 2844.381489] FAULT_INJECTION: forcing a failure. [ 2844.381489] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.384986] CPU: 1 PID: 14096 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2844.386667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.388776] Call Trace: [ 2844.389404] dump_stack+0x107/0x167 [ 2844.390254] should_fail.cold+0x5/0xa [ 2844.391155] ? create_object.isra.0+0x3a/0xa20 [ 2844.392219] should_failslab+0x5/0x20 [ 2844.393103] kmem_cache_alloc+0x5b/0x310 [ 2844.394060] ? mark_held_locks+0x9e/0xe0 [ 2844.395209] create_object.isra.0+0x3a/0xa20 [ 2844.396356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2844.397643] kmem_cache_alloc+0x159/0x310 [ 2844.398724] xas_alloc+0x336/0x440 [ 2844.399669] xas_create+0x34a/0x10d0 [ 2844.400451] ? kernel_text_address+0xf2/0x120 [ 2844.401165] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2844.402120] xas_store+0x8c/0x1c40 [ 2844.402782] __xa_store+0x164/0x2d0 [ 2844.403447] ? xa_delete_node+0x280/0x280 [ 2844.404152] ? trace_hardirqs_on+0x5b/0x180 [ 2844.404738] xa_store+0x31/0x50 [ 2844.405199] __io_uring_add_tctx_node+0x1cf/0x520 [ 2844.405834] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2844.406469] ? alloc_fd+0x2e7/0x670 [ 2844.406921] io_uring_setup+0x1fbb/0x2980 [ 2844.407427] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2844.408028] ? wait_for_completion_io+0x270/0x270 [ 2844.408603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2844.409223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2844.409829] do_syscall_64+0x33/0x40 [ 2844.410274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2844.410887] RIP: 0033:0x7f9c3da0ab19 [ 2844.411332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.413483] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2844.414394] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2844.415246] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2844.416084] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2844.416923] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2844.417760] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2844.423206] loop2: detected capacity change from 0 to 135266304 [ 2844.428398] FAULT_INJECTION: forcing a failure. [ 2844.428398] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.430064] CPU: 1 PID: 14095 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2844.431068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.432037] Call Trace: [ 2844.432428] dump_stack+0x107/0x167 [ 2844.432953] should_fail.cold+0x5/0xa [ 2844.433494] ? create_object.isra.0+0x3a/0xa20 [ 2844.434136] should_failslab+0x5/0x20 [ 2844.434676] kmem_cache_alloc+0x5b/0x310 [ 2844.435253] ? mark_held_locks+0x9e/0xe0 [ 2844.435816] create_object.isra.0+0x3a/0xa20 [ 2844.436436] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2844.437154] kmem_cache_alloc+0x159/0x310 [ 2844.437641] xas_alloc+0x336/0x440 [ 2844.438145] xas_create+0x34a/0x10d0 [ 2844.438681] ? kernel_text_address+0xf2/0x120 [ 2844.439321] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2844.440061] xas_store+0x8c/0x1c40 [ 2844.440568] __xa_store+0x164/0x2d0 [ 2844.441081] ? xa_delete_node+0x280/0x280 [ 2844.441675] ? trace_hardirqs_on+0x5b/0x180 [ 2844.442290] xa_store+0x31/0x50 [ 2844.442749] __io_uring_add_tctx_node+0x1cf/0x520 [ 2844.443450] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2844.444062] ? alloc_fd+0x2e7/0x670 [ 2844.444586] io_uring_setup+0x1fbb/0x2980 [ 2844.445193] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2844.445913] ? wait_for_completion_io+0x270/0x270 [ 2844.446606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2844.447366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2844.448089] do_syscall_64+0x33/0x40 [ 2844.448618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2844.449342] RIP: 0033:0x7f838ee79b19 [ 2844.449867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.451991] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2844.453074] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2844.453898] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2844.454921] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2844.455941] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2844.456797] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2844.463222] FAT-fs (loop2): bogus number of reserved sectors [ 2844.464088] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2844.488396] loop2: detected capacity change from 0 to 135266304 05:12:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = fspick(r0, &(0x7f0000000000)='./file0\x00', 0x1) open_by_handle_at(r1, &(0x7f0000000040)=@ocfs2={0xc, 0x1, {0x8, 0xc2, 0x4}}, 0x40100) [ 2844.501290] FAT-fs (loop2): bogus number of reserved sectors [ 2844.502558] FAT-fs (loop2): Can't find a valid FAT filesystem 05:12:55 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 76) 05:12:55 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 64) 05:12:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x241d0000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:12:55 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2844.567783] FAULT_INJECTION: forcing a failure. [ 2844.567783] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.569221] CPU: 1 PID: 14112 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2844.570029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.570987] Call Trace: [ 2844.571291] dump_stack+0x107/0x167 [ 2844.571709] should_fail.cold+0x5/0xa [ 2844.572147] ? xas_alloc+0x336/0x440 [ 2844.572572] should_failslab+0x5/0x20 [ 2844.573010] kmem_cache_alloc+0x5b/0x310 [ 2844.573472] xas_alloc+0x336/0x440 [ 2844.573877] xas_create+0x34a/0x10d0 [ 2844.574321] ? kernel_text_address+0xf2/0x120 [ 2844.574833] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2844.575451] xas_store+0x8c/0x1c40 [ 2844.575904] __xa_store+0x164/0x2d0 [ 2844.576334] ? xa_delete_node+0x280/0x280 [ 2844.576872] ? trace_hardirqs_on+0x5b/0x180 [ 2844.577394] xa_store+0x31/0x50 [ 2844.577782] __io_uring_add_tctx_node+0x1cf/0x520 [ 2844.578339] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2844.578965] ? alloc_fd+0x2e7/0x670 [ 2844.579390] io_uring_setup+0x1fbb/0x2980 [ 2844.579876] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2844.580459] ? wait_for_completion_io+0x270/0x270 [ 2844.581030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2844.581632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2844.582233] do_syscall_64+0x33/0x40 [ 2844.582660] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2844.583255] RIP: 0033:0x7f9c3da0ab19 [ 2844.583681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.585795] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2844.586669] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2844.587512] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2844.588321] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2844.589149] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2844.589971] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2844.596121] FAULT_INJECTION: forcing a failure. [ 2844.596121] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.597449] CPU: 1 PID: 14113 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2844.598266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.599299] Call Trace: [ 2844.599647] dump_stack+0x107/0x167 [ 2844.600110] should_fail.cold+0x5/0xa [ 2844.600572] ? xas_alloc+0x336/0x440 [ 2844.601011] should_failslab+0x5/0x20 [ 2844.601443] kmem_cache_alloc+0x5b/0x310 [ 2844.601911] xas_alloc+0x336/0x440 [ 2844.602327] xas_create+0x34a/0x10d0 [ 2844.602759] ? kernel_text_address+0xf2/0x120 [ 2844.603282] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2844.603880] xas_store+0x8c/0x1c40 [ 2844.604291] __xa_store+0x164/0x2d0 [ 2844.604707] ? xa_delete_node+0x280/0x280 [ 2844.605200] ? trace_hardirqs_on+0x5b/0x180 [ 2844.605710] xa_store+0x31/0x50 [ 2844.606159] __io_uring_add_tctx_node+0x1cf/0x520 [ 2844.606738] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2844.607372] ? alloc_fd+0x2e7/0x670 [ 2844.607910] io_uring_setup+0x1fbb/0x2980 [ 2844.608405] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2844.609128] ? wait_for_completion_io+0x270/0x270 [ 2844.609710] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2844.610446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2844.611104] do_syscall_64+0x33/0x40 [ 2844.611636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2844.612229] RIP: 0033:0x7f838ee79b19 [ 2844.612756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.615371] RSP: 002b:00007f838c3ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2844.616458] RAX: ffffffffffffffda RBX: 00007f838ef8cf60 RCX: 00007f838ee79b19 [ 2844.617475] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2844.618482] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2844.619485] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2844.620487] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:12:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x251d0000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:12:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) 05:12:55 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:13:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2e000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:13:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x7ffffff7) 05:13:08 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182308, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:13:08 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 65) 05:13:08 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001580)=ANY=[@ANYBLOB="010000080100000018000000e659afd5609fa9f64b14f2fe33cf58ba25731a4474cd709a0674a3f6cc91219dc3a9033ced0839493a267318c58673fc6c88806f78a6f6a951c0f39d95cc82e50727919cca65468b50503a9e9377226524e38206dd3ea338ca1b11ffcb29a3b51125026f65f34b8855e90b2e2a77f06c09d073bef8eadc26a7601da699c46428397f6cd023b1f0c4c969ee61dad59db997e6ea992bf8cb09f7021df4754738a8a89dc2e03fe4cc116099d231d2a695a2", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/file0/file0\x00']) inotify_add_watch(r1, &(0x7f00000000c0)='./file0/file0/file0\x00', 0x1000010) r2 = syz_io_uring_setup(0x4d50, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={r2, 0x2, 0x1, 0x3ff}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_io_uring_submit(r3, 0x0, &(0x7f0000001540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r5, &(0x7f0000001500)={0x20000000}, r6, 0x3, 0x0, 0x1}, 0x6) syz_io_uring_submit(r3, r4, 0x0, 0x1d3) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0xa0080, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', &(0x7f00000002c0), 0x88004, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',vers0.u,fscache,loose,dfltuid=', @ANYRESHEX=r9, @ANYBLOB=',posixacl,noextend,msize=0x0000000000000008,obj_type=$+#,func=MODULE_CHECK,seclabel,\x00']) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@can, 0x0, 0x800, 0x0, {0x0, r8}}, 0x98) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') inotify_add_watch(r10, &(0x7f00000014c0)='./file0/file0/file0\x00', 0xc1000988) 05:13:08 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 77) 05:13:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x204000}], 0x7ffff000, 0x0) 05:13:08 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}], 0x6, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2857.821067] FAULT_INJECTION: forcing a failure. [ 2857.821067] name failslab, interval 1, probability 0, space 0, times 0 [ 2857.822700] CPU: 0 PID: 14141 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2857.823655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2857.824786] Call Trace: [ 2857.825151] dump_stack+0x107/0x167 [ 2857.825650] should_fail.cold+0x5/0xa [ 2857.826171] ? create_object.isra.0+0x3a/0xa20 [ 2857.826794] should_failslab+0x5/0x20 [ 2857.827338] kmem_cache_alloc+0x5b/0x310 [ 2857.827884] ? mark_held_locks+0x9e/0xe0 [ 2857.828444] create_object.isra.0+0x3a/0xa20 [ 2857.829039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2857.829733] kmem_cache_alloc+0x159/0x310 [ 2857.830301] xas_alloc+0x336/0x440 [ 2857.830789] xas_create+0x34a/0x10d0 [ 2857.831316] ? kernel_text_address+0xf2/0x120 [ 2857.831932] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2857.832643] xas_store+0x8c/0x1c40 [ 2857.833133] __xa_store+0x164/0x2d0 [ 2857.833630] ? xa_delete_node+0x280/0x280 [ 2857.834204] ? trace_hardirqs_on+0x5b/0x180 [ 2857.834811] xa_store+0x31/0x50 [ 2857.835272] __io_uring_add_tctx_node+0x1cf/0x520 [ 2857.835936] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2857.836640] ? alloc_fd+0x2e7/0x670 [ 2857.837140] io_uring_setup+0x1fbb/0x2980 [ 2857.837708] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2857.838394] ? wait_for_completion_io+0x270/0x270 [ 2857.839063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2857.839779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2857.840481] do_syscall_64+0x33/0x40 [ 2857.840984] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2857.841676] RIP: 0033:0x7f9c3da0ab19 [ 2857.842187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2857.844714] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2857.845745] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2857.846712] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2857.847706] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2857.848665] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2857.849625] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2857.854232] loop2: detected capacity change from 0 to 135266304 [ 2857.879013] FAT-fs (loop2): bogus number of reserved sectors [ 2857.880476] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2857.892110] FAULT_INJECTION: forcing a failure. [ 2857.892110] name failslab, interval 1, probability 0, space 0, times 0 [ 2857.893681] CPU: 0 PID: 14156 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2857.894595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2857.895718] Call Trace: [ 2857.896076] dump_stack+0x107/0x167 [ 2857.896562] should_fail.cold+0x5/0xa [ 2857.897076] ? create_object.isra.0+0x3a/0xa20 [ 2857.897687] should_failslab+0x5/0x20 [ 2857.898204] kmem_cache_alloc+0x5b/0x310 [ 2857.898744] ? mark_held_locks+0x9e/0xe0 [ 2857.899295] create_object.isra.0+0x3a/0xa20 [ 2857.899888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2857.900566] kmem_cache_alloc+0x159/0x310 [ 2857.901123] xas_alloc+0x336/0x440 [ 2857.901596] xas_create+0x34a/0x10d0 [ 2857.902097] ? kernel_text_address+0xf2/0x120 [ 2857.902693] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2857.903409] xas_store+0x8c/0x1c40 [ 2857.903897] __xa_store+0x164/0x2d0 [ 2857.904381] ? xa_delete_node+0x280/0x280 [ 2857.904933] ? trace_hardirqs_on+0x5b/0x180 [ 2857.905511] xa_store+0x31/0x50 [ 2857.905945] __io_uring_add_tctx_node+0x1cf/0x520 [ 2857.906607] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2857.907311] ? alloc_fd+0x2e7/0x670 [ 2857.907818] io_uring_setup+0x1fbb/0x2980 [ 2857.908370] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2857.909043] ? wait_for_completion_io+0x270/0x270 [ 2857.909698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2857.910404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2857.911065] do_syscall_64+0x33/0x40 [ 2857.911537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2857.912220] RIP: 0033:0x7f838ee79b19 [ 2857.912710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2857.915182] RSP: 002b:00007f838c3ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2857.916184] RAX: ffffffffffffffda RBX: 00007f838ef8d020 RCX: 00007f838ee79b19 [ 2857.917148] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2857.918104] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2857.919055] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2857.920015] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2857.939279] loop2: detected capacity change from 0 to 135266304 05:13:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xc8050000) [ 2857.950460] FAT-fs (loop2): bogus number of reserved sectors [ 2857.951843] FAT-fs (loop2): Can't find a valid FAT filesystem 05:13:09 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/190, 0xbe}, {&(0x7f0000001340)=""/79, 0x4f}, {&(0x7f0000001440)=""/76, 0x4c}, {&(0x7f00000014c0)=""/223, 0xdf}, {&(0x7f00000015c0)=""/167, 0xa7}], 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, r0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:13:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x37270400, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:13:09 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}], 0x6, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:13:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xeffdffff) 05:13:09 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x84242, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000000140)="d13feb39916cad499103e3a00a231273142df19a4a641026a45624f17377c52d5d0fdca12955987c864b5155ab45de21f13ded55a941e198f36eae238af7fa8b4ed910caffac0446908d3208ab280ca3064f834f88d59dd48390fa4070ac49ffc0efd5ea3d273bdfb087ff6db78768d79274ce3f4900a9a67785d017a95eb48093a47295c5dd29d1499a9ff056406b16fcba18000179865c956de32fef007ab1c9479d7a8b98fe156041c19f8eb0ac21c821f1cc882c91d21e31f2cdc6026d06327b4d9eab12ee7e6afa9d7e7626676fe3eceb3537a2177a97c438f516", 0xdd, r0}, 0x68) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 05:13:09 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 66) 05:13:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x3f000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:13:09 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}], 0x6, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2858.132657] FAULT_INJECTION: forcing a failure. [ 2858.132657] name failslab, interval 1, probability 0, space 0, times 0 [ 2858.134140] CPU: 0 PID: 14179 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2858.134982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2858.136006] Call Trace: [ 2858.136335] dump_stack+0x107/0x167 [ 2858.136779] should_fail.cold+0x5/0xa [ 2858.137242] ? xas_alloc+0x336/0x440 [ 2858.137696] should_failslab+0x5/0x20 [ 2858.138160] kmem_cache_alloc+0x5b/0x310 [ 2858.138656] xas_alloc+0x336/0x440 [ 2858.139100] xas_create+0x34a/0x10d0 [ 2858.139557] ? kernel_text_address+0xf2/0x120 [ 2858.140103] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2858.140738] xas_store+0x8c/0x1c40 [ 2858.141177] __xa_store+0x164/0x2d0 [ 2858.141620] ? xa_delete_node+0x280/0x280 [ 2858.142127] ? trace_hardirqs_on+0x5b/0x180 [ 2858.142654] xa_store+0x31/0x50 [ 2858.143064] __io_uring_add_tctx_node+0x1cf/0x520 [ 2858.143650] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2858.144284] ? alloc_fd+0x2e7/0x670 [ 2858.144730] io_uring_setup+0x1fbb/0x2980 [ 2858.145242] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2858.145859] ? wait_for_completion_io+0x270/0x270 [ 2858.146458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2858.147102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2858.147729] do_syscall_64+0x33/0x40 [ 2858.148183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2858.148803] RIP: 0033:0x7f9c3da0ab19 [ 2858.149256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2858.151493] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2858.152421] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2858.153286] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2858.154149] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2858.155022] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2858.155885] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:13:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x40000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2858.219460] loop2: detected capacity change from 0 to 135266304 [ 2858.226321] FAT-fs (loop2): bogus number of reserved sectors [ 2858.227795] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2858.253357] loop2: detected capacity change from 0 to 135266304 [ 2858.268866] FAT-fs (loop2): bogus number of reserved sectors [ 2858.270857] FAT-fs (loop2): Can't find a valid FAT filesystem 05:13:23 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018c53bec1e45f96e3b3eae7d5410000000", @ANYRES32=r0, @ANYBLOB="041a000000000000aa24a9216c655300"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') 05:13:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x20c805}], 0x7ffff000, 0x0) 05:13:23 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x4018230a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:13:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xf7ffff7f) 05:13:23 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 67) 05:13:23 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 78) 05:13:23 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {0x0}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:13:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x48000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2872.442366] FAULT_INJECTION: forcing a failure. [ 2872.442366] name failslab, interval 1, probability 0, space 0, times 0 [ 2872.445485] loop2: detected capacity change from 0 to 135266304 [ 2872.447044] CPU: 0 PID: 14198 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2872.448764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2872.450819] Call Trace: [ 2872.451506] dump_stack+0x107/0x167 [ 2872.452483] should_fail.cold+0x5/0xa [ 2872.453486] ? vm_area_dup+0x78/0x290 [ 2872.454428] should_failslab+0x5/0x20 [ 2872.455372] kmem_cache_alloc+0x5b/0x310 [ 2872.456373] vm_area_dup+0x78/0x290 [ 2872.457097] FAT-fs (loop2): bogus number of reserved sectors [ 2872.457265] ? lock_release+0x680/0x680 [ 2872.458558] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2872.459502] ? mark_lock+0xf5/0x2df0 [ 2872.459534] ? lock_chain_count+0x20/0x20 [ 2872.462628] ? mark_lock+0xf5/0x2df0 [ 2872.463566] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2872.464855] ? lock_chain_count+0x20/0x20 [ 2872.465876] ? mark_lock+0xf5/0x2df0 [ 2872.466792] ? vm_area_alloc+0x110/0x110 [ 2872.467801] ? __lock_acquire+0x1657/0x5b00 [ 2872.468885] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2872.470178] ? vmacache_find+0x55/0x2a0 [ 2872.471163] __split_vma+0xa8/0x4e0 [ 2872.472061] __do_munmap+0x365/0x1260 [ 2872.473000] ? arch_get_unmapped_area+0x450/0x450 [ 2872.474184] ? lock_release+0x680/0x680 [ 2872.475174] mmap_region+0x7c8/0x1500 [ 2872.476124] do_mmap+0xcdb/0x11e0 [ 2872.476985] vm_mmap_pgoff+0x198/0x1f0 [ 2872.477943] ? randomize_page+0xb0/0xb0 [ 2872.478934] ksys_mmap_pgoff+0x41c/0x560 [ 2872.479941] ? find_mergeable_anon_vma+0x250/0x250 [ 2872.481150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2872.482616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2872.483904] do_syscall_64+0x33/0x40 [ 2872.484818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2872.486086] RIP: 0033:0x7f838ee79b62 [ 2872.487011] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2872.491570] RSP: 002b:00007f838c3ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2872.493442] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f838ee79b62 [ 2872.495206] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2872.496969] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2872.498724] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000800 [ 2872.500494] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2872.516220] loop2: detected capacity change from 0 to 135266304 [ 2872.527014] FAT-fs (loop2): bogus number of reserved sectors [ 2872.528310] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2872.534698] FAULT_INJECTION: forcing a failure. [ 2872.534698] name failslab, interval 1, probability 0, space 0, times 0 [ 2872.537534] CPU: 0 PID: 14215 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2872.539273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2872.541302] Call Trace: [ 2872.541953] dump_stack+0x107/0x167 [ 2872.542844] should_fail.cold+0x5/0xa [ 2872.543792] ? create_object.isra.0+0x3a/0xa20 [ 2872.544911] should_failslab+0x5/0x20 [ 2872.545840] kmem_cache_alloc+0x5b/0x310 [ 2872.546839] ? mark_held_locks+0x9e/0xe0 [ 2872.547845] create_object.isra.0+0x3a/0xa20 [ 2872.548918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2872.550218] kmem_cache_alloc+0x159/0x310 [ 2872.551243] xas_alloc+0x336/0x440 [ 2872.552108] xas_create+0x34a/0x10d0 [ 2872.553015] ? kernel_text_address+0xf2/0x120 [ 2872.554108] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2872.555390] xas_store+0x8c/0x1c40 [ 2872.556269] __xa_store+0x164/0x2d0 [ 2872.557160] ? xa_delete_node+0x280/0x280 [ 2872.558177] ? trace_hardirqs_on+0x5b/0x180 [ 2872.559238] xa_store+0x31/0x50 [ 2872.560043] __io_uring_add_tctx_node+0x1cf/0x520 [ 2872.561217] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2872.562497] ? alloc_fd+0x2e7/0x670 [ 2872.563467] io_uring_setup+0x1fbb/0x2980 [ 2872.564500] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2872.565731] ? wait_for_completion_io+0x270/0x270 [ 2872.566930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2872.568220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2872.569479] do_syscall_64+0x33/0x40 [ 2872.570389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2872.571648] RIP: 0033:0x7f9c3da0ab19 [ 2872.572556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2872.577048] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2872.578907] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2872.580657] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2872.582384] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2872.584128] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2872.585876] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:13:23 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {0x0}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:13:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4c000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:13:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xff030000) [ 2872.714388] loop2: detected capacity change from 0 to 135266304 05:13:23 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 68) [ 2872.724812] FAT-fs (loop2): bogus number of reserved sectors [ 2872.726398] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2872.743604] loop2: detected capacity change from 0 to 135266304 [ 2872.749295] FAT-fs (loop2): bogus number of reserved sectors [ 2872.750871] FAT-fs (loop2): Can't find a valid FAT filesystem 05:13:23 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 79) 05:13:23 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/99, 0x63}, {0x0}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2872.795651] FAULT_INJECTION: forcing a failure. [ 2872.795651] name failslab, interval 1, probability 0, space 0, times 0 [ 2872.797645] CPU: 1 PID: 14233 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2872.798835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2872.800271] Call Trace: [ 2872.800726] dump_stack+0x107/0x167 [ 2872.801356] should_fail.cold+0x5/0xa [ 2872.802009] ? xas_alloc+0x336/0x440 [ 2872.802655] should_failslab+0x5/0x20 [ 2872.803315] kmem_cache_alloc+0x5b/0x310 [ 2872.804016] xas_alloc+0x336/0x440 [ 2872.804628] xas_create+0x34a/0x10d0 [ 2872.805274] ? kernel_text_address+0xf2/0x120 [ 2872.806049] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2872.806944] xas_store+0x8c/0x1c40 [ 2872.807593] __xa_store+0x164/0x2d0 [ 2872.808217] ? xa_delete_node+0x280/0x280 [ 2872.808934] ? trace_hardirqs_on+0x5b/0x180 [ 2872.809681] xa_store+0x31/0x50 [ 2872.810246] __io_uring_add_tctx_node+0x1cf/0x520 [ 2872.811067] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2872.811971] ? alloc_fd+0x2e7/0x670 [ 2872.812600] io_uring_setup+0x1fbb/0x2980 [ 2872.813313] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2872.814178] ? wait_for_completion_io+0x270/0x270 [ 2872.815020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2872.815926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2872.816816] do_syscall_64+0x33/0x40 [ 2872.817448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2872.818323] RIP: 0033:0x7f9c3da0ab19 [ 2872.818964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2872.822128] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2872.823481] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2872.824697] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2872.825911] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2872.827125] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2872.828335] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:13:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x68000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2872.862383] FAULT_INJECTION: forcing a failure. [ 2872.862383] name failslab, interval 1, probability 0, space 0, times 0 [ 2872.865282] CPU: 0 PID: 14236 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2872.867009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2872.869056] Call Trace: [ 2872.869704] dump_stack+0x107/0x167 [ 2872.870598] should_fail.cold+0x5/0xa [ 2872.871555] ? create_object.isra.0+0x3a/0xa20 [ 2872.872671] should_failslab+0x5/0x20 [ 2872.873600] kmem_cache_alloc+0x5b/0x310 [ 2872.874605] create_object.isra.0+0x3a/0xa20 [ 2872.875680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2872.876928] kmem_cache_alloc+0x159/0x310 [ 2872.877945] vm_area_dup+0x78/0x290 [ 2872.878833] ? lock_release+0x680/0x680 [ 2872.879814] ? mark_lock+0xf5/0x2df0 [ 2872.880729] ? lock_chain_count+0x20/0x20 [ 2872.881738] ? mark_lock+0xf5/0x2df0 [ 2872.882655] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2872.883949] ? lock_chain_count+0x20/0x20 [ 2872.884970] ? mark_lock+0xf5/0x2df0 [ 2872.885888] ? vm_area_alloc+0x110/0x110 [ 2872.886891] ? __lock_acquire+0x1657/0x5b00 [ 2872.887974] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2872.889251] ? vmacache_find+0x55/0x2a0 [ 2872.890217] __split_vma+0xa8/0x4e0 [ 2872.891105] __do_munmap+0x365/0x1260 [ 2872.892034] ? arch_get_unmapped_area+0x450/0x450 [ 2872.893208] ? lock_release+0x680/0x680 [ 2872.894181] mmap_region+0x7c8/0x1500 [ 2872.895125] do_mmap+0xcdb/0x11e0 [ 2872.895986] vm_mmap_pgoff+0x198/0x1f0 [ 2872.896934] ? randomize_page+0xb0/0xb0 [ 2872.897911] ksys_mmap_pgoff+0x41c/0x560 [ 2872.898909] ? find_mergeable_anon_vma+0x250/0x250 [ 2872.900133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2872.901405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2872.902665] do_syscall_64+0x33/0x40 [ 2872.903590] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2872.904840] RIP: 0033:0x7f838ee79b62 [ 2872.905747] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2872.910245] RSP: 002b:00007f838c3ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2872.912105] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f838ee79b62 [ 2872.913841] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2872.915592] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2872.917326] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000800 [ 2872.919066] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2872.949610] loop2: detected capacity change from 0 to 135266304 [ 2872.964282] FAT-fs (loop2): bogus number of reserved sectors [ 2872.965778] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2872.998853] loop2: detected capacity change from 0 to 135266304 [ 2873.023929] FAT-fs (loop2): bogus number of reserved sectors [ 2873.025586] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2887.481019] FAULT_INJECTION: forcing a failure. [ 2887.481019] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.482763] CPU: 0 PID: 14265 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2887.483629] FAULT_INJECTION: forcing a failure. [ 2887.483629] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.483798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.483814] Call Trace: [ 2887.487787] dump_stack+0x107/0x167 [ 2887.488326] should_fail.cold+0x5/0xa [ 2887.488894] ? create_object.isra.0+0x3a/0xa20 [ 2887.489571] should_failslab+0x5/0x20 [ 2887.490135] kmem_cache_alloc+0x5b/0x310 [ 2887.490733] ? mark_held_locks+0x9e/0xe0 [ 2887.491337] create_object.isra.0+0x3a/0xa20 [ 2887.491985] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.492731] kmem_cache_alloc+0x159/0x310 [ 2887.493347] xas_alloc+0x336/0x440 [ 2887.493870] xas_create+0x34a/0x10d0 [ 2887.494421] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2887.495154] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2887.495929] xas_store+0x8c/0x1c40 [ 2887.496459] __xa_store+0x164/0x2d0 [ 2887.497020] ? xa_delete_node+0x280/0x280 [ 2887.497652] ? trace_hardirqs_on+0x5b/0x180 [ 2887.498313] xa_store+0x31/0x50 [ 2887.498817] __io_uring_add_tctx_node+0x1cf/0x520 [ 2887.499553] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2887.500324] ? alloc_fd+0x2e7/0x670 [ 2887.500859] io_uring_setup+0x1fbb/0x2980 [ 2887.501492] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2887.502229] ? wait_for_completion_io+0x270/0x270 [ 2887.502957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2887.503728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.504480] do_syscall_64+0x33/0x40 [ 2887.505024] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.505769] RIP: 0033:0x7f9c3da0ab19 [ 2887.506313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.508999] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2887.510112] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2887.511153] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2887.512197] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2887.513233] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2887.514277] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2887.515353] CPU: 1 PID: 14256 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2887.516828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.518553] Call Trace: [ 2887.519112] dump_stack+0x107/0x167 [ 2887.519887] should_fail.cold+0x5/0xa [ 2887.520688] ? anon_vma_clone+0xdc/0x590 [ 2887.521544] should_failslab+0x5/0x20 [ 2887.522339] kmem_cache_alloc+0x5b/0x310 [ 2887.523219] anon_vma_clone+0xdc/0x590 [ 2887.524069] __split_vma+0x17c/0x4e0 [ 2887.524880] __do_munmap+0x365/0x1260 [ 2887.525706] ? arch_get_unmapped_area+0x450/0x450 [ 2887.526723] ? lock_release+0x680/0x680 [ 2887.527571] mmap_region+0x7c8/0x1500 [ 2887.528377] do_mmap+0xcdb/0x11e0 [ 2887.529114] vm_mmap_pgoff+0x198/0x1f0 [ 2887.529931] ? randomize_page+0xb0/0xb0 [ 2887.530801] ksys_mmap_pgoff+0x41c/0x560 [ 2887.531682] ? find_mergeable_anon_vma+0x250/0x250 [ 2887.532739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2887.533835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.534945] do_syscall_64+0x33/0x40 [ 2887.535759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.536859] RIP: 0033:0x7f838ee79b62 [ 2887.537660] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2887.541563] RSP: 002b:00007f838c3ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2887.543166] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f838ee79b62 [ 2887.544673] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2887.546161] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2887.547660] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000800 [ 2887.549121] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:13:38 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 69) 05:13:38 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x4018230c, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:13:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xfffffdef) 05:13:38 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x6, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:13:38 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 80) 05:13:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x6c000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:13:38 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/136, 0x88, 0x20200000000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005f600)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "6bdffd11733d8c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054a80)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "043ba9ba70070b"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000060600)={0x0, 0x0, "4350ce7a5b0a7b2c555e88c4021c17e945723738bae0eafd0fdb38b3e50d4193f01dad83c17baf3a251cf6d20d2eddcbbebc9b166ea6e3bdbf9c9b27ab654c5bed6ba3354f655fbaf48b089ee0096f98de084dfbb2e4f609bf276a16c27ff6e7fc899594827bc0a9f9da5cd14e2a3189d128a3f5b8c76470b099f7f9aad08b1d0212760cbffee9af55764811e501c13d8db812740ee036f72eff1592975cfa3501c3f0f6fb5f9d0ce9c13747c7f349c8b44ded2e3d4682e40f149da9b77a1daeab961f9e93dea2b86a72655ecac6829c4e1441f0df590d1baad2fce74d901edcd107f580aab1da92ca9eb92631708a085b435d62820ef3bc93e9a0bcdd0812d4", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000061600)={0x3ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "1c4f8e71f35e36"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000062600)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "c41d8c97be3228"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000063600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054a80)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x0, "043ba9ba70070b"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000063800)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054a80)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x0, "043ba9ba70070b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063a00)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r4, r5}, {}, {}, {0x0, r6}, {0x0, r7}, {r8, r9}, {0x0, r10}, {r11}, {r12, r13}], 0x0, "d847ffa30172e3"}) 05:13:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x20ff03}], 0x7ffff000, 0x0) [ 2887.565373] loop2: detected capacity change from 0 to 135266304 [ 2887.574460] FAT-fs (loop2): bogus number of reserved sectors [ 2887.575376] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2887.593358] loop2: detected capacity change from 0 to 135266304 [ 2887.596978] FAT-fs (loop2): bogus number of reserved sectors [ 2887.597940] FAT-fs (loop2): Can't find a valid FAT filesystem 05:13:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0xffffff7f) 05:13:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x74000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2887.671269] loop2: detected capacity change from 0 to 135266304 05:13:38 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 70) 05:13:38 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x6, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:13:38 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 81) 05:13:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) open_by_handle_at(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x2300) 05:13:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x4000000000000) [ 2887.746172] FAT-fs (loop2): bogus number of reserved sectors [ 2887.747124] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2887.757350] FAULT_INJECTION: forcing a failure. [ 2887.757350] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.759941] CPU: 1 PID: 14289 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2887.761393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.763136] Call Trace: [ 2887.763710] dump_stack+0x107/0x167 [ 2887.764482] should_fail.cold+0x5/0xa [ 2887.765298] ? create_object.isra.0+0x3a/0xa20 [ 2887.766285] should_failslab+0x5/0x20 [ 2887.767131] kmem_cache_alloc+0x5b/0x310 [ 2887.767996] ? mark_held_locks+0x9e/0xe0 [ 2887.768862] create_object.isra.0+0x3a/0xa20 [ 2887.769795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.770865] kmem_cache_alloc+0x159/0x310 [ 2887.771749] xas_alloc+0x336/0x440 [ 2887.772511] xas_create+0x34a/0x10d0 [ 2887.773304] ? kernel_text_address+0xf2/0x120 [ 2887.774256] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2887.775372] xas_store+0x8c/0x1c40 [ 2887.776119] __xa_store+0x164/0x2d0 [ 2887.776879] ? xa_delete_node+0x280/0x280 [ 2887.777779] ? trace_hardirqs_on+0x5b/0x180 [ 2887.778717] xa_store+0x31/0x50 [ 2887.779446] __io_uring_add_tctx_node+0x1cf/0x520 [ 2887.780481] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2887.781606] ? alloc_fd+0x2e7/0x670 [ 2887.782367] io_uring_setup+0x1fbb/0x2980 [ 2887.783267] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2887.784339] ? wait_for_completion_io+0x270/0x270 [ 2887.785381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2887.786476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.787571] do_syscall_64+0x33/0x40 [ 2887.788363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.789425] RIP: 0033:0x7f9c3da0ab19 [ 2887.790211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.794105] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2887.795717] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2887.797235] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2887.798751] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2887.800260] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2887.801768] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:13:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x7a000000, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) [ 2887.852356] FAULT_INJECTION: forcing a failure. [ 2887.852356] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.854836] CPU: 1 PID: 14293 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2887.856337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.858100] Call Trace: [ 2887.858674] dump_stack+0x107/0x167 [ 2887.859475] should_fail.cold+0x5/0xa [ 2887.860300] ? create_object.isra.0+0x3a/0xa20 [ 2887.861293] should_failslab+0x5/0x20 [ 2887.862117] kmem_cache_alloc+0x5b/0x310 [ 2887.863000] create_object.isra.0+0x3a/0xa20 [ 2887.863964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.865058] kmem_cache_alloc+0x159/0x310 [ 2887.865962] anon_vma_clone+0xdc/0x590 [ 2887.866801] __split_vma+0x17c/0x4e0 [ 2887.867607] __do_munmap+0x365/0x1260 [ 2887.868423] ? arch_get_unmapped_area+0x450/0x450 [ 2887.869450] ? lock_release+0x680/0x680 [ 2887.870297] mmap_region+0x7c8/0x1500 [ 2887.871114] do_mmap+0xcdb/0x11e0 [ 2887.871872] vm_mmap_pgoff+0x198/0x1f0 [ 2887.872695] ? randomize_page+0xb0/0xb0 [ 2887.873570] ksys_mmap_pgoff+0x41c/0x560 [ 2887.874437] ? find_mergeable_anon_vma+0x250/0x250 [ 2887.875503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2887.876623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.877741] do_syscall_64+0x33/0x40 [ 2887.878549] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.879665] RIP: 0033:0x7f838ee79b62 [ 2887.880460] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2887.884409] RSP: 002b:00007f838c3ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2887.886031] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f838ee79b62 [ 2887.887539] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2887.889040] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2887.890555] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000800 [ 2887.892079] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:13:55 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 82) 05:13:55 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 71) 05:13:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x7, 0x3f, 0x1f, 0x6, 0x0, 0xff, 0x41a, 0x12, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x9aa78b95b6efa5ae, @perf_config_ext={0x8, 0x1dc0000000}, 0x201, 0x7, 0xd4b3, 0x9, 0x0, 0x2, 0x5, 0x0, 0x40, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) 05:13:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x7ffffffe, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:13:55 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x6, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) 05:13:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0xfffffffa, 0x3, 0x8, 0x8, 0x2, 0x7fffffff}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clone3(&(0x7f00000001c0)={0x40182310, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="88afe0f4c6cfeadac727836b3a4247cbdd71e7be0553561f3c291e4955691d9ed2df26bf403e90fe30abe5b71d1731cc86135f50daf0f352fd5ef7c9f8b18561e75d4ae1a233969f66c86677e4aa734a634a14be83db7fe5b21e94e9f7730fb3afb713e49de81d3d513afe44f74edc849ce6d09256ab5abccf10a7ec34c7e390aefe68aa416ce036a1c2b4d49d4025f6f27a4ae13d4c972a35dc897d00ec597841c6"]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044014) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000140)) 05:13:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff002, 0x0) 05:13:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x8000000000000) [ 2904.587805] FAULT_INJECTION: forcing a failure. [ 2904.587805] name failslab, interval 1, probability 0, space 0, times 0 [ 2904.590293] CPU: 1 PID: 14317 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2904.591806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2904.593599] Call Trace: [ 2904.594183] dump_stack+0x107/0x167 [ 2904.594960] should_fail.cold+0x5/0xa [ 2904.595813] ? vm_area_alloc+0x1c/0x110 [ 2904.596679] should_failslab+0x5/0x20 [ 2904.597519] kmem_cache_alloc+0x5b/0x310 [ 2904.598405] vm_area_alloc+0x1c/0x110 [ 2904.599241] mmap_region+0x97e/0x1500 [ 2904.600095] do_mmap+0xcdb/0x11e0 [ 2904.600846] vm_mmap_pgoff+0x198/0x1f0 [ 2904.601698] ? randomize_page+0xb0/0xb0 [ 2904.602573] ksys_mmap_pgoff+0x41c/0x560 [ 2904.603479] ? find_mergeable_anon_vma+0x250/0x250 [ 2904.604565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2904.605701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2904.606816] do_syscall_64+0x33/0x40 [ 2904.607649] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2904.608770] RIP: 0033:0x7f838ee79b62 [ 2904.609719] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2904.613730] RSP: 002b:00007f838c3ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2904.615381] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f838ee79b62 [ 2904.616947] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2904.618509] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2904.619683] FAULT_INJECTION: forcing a failure. [ 2904.619683] name failslab, interval 1, probability 0, space 0, times 0 [ 2904.620084] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000800 [ 2904.620097] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2904.626588] CPU: 0 PID: 14315 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2904.628338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2904.630390] Call Trace: [ 2904.631054] dump_stack+0x107/0x167 [ 2904.631970] should_fail.cold+0x5/0xa [ 2904.632927] ? create_object.isra.0+0x3a/0xa20 [ 2904.634055] should_failslab+0x5/0x20 [ 2904.634992] kmem_cache_alloc+0x5b/0x310 [ 2904.636011] ? mark_held_locks+0x9e/0xe0 [ 2904.637026] create_object.isra.0+0x3a/0xa20 [ 2904.638124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2904.639366] kmem_cache_alloc+0x159/0x310 [ 2904.640439] xas_alloc+0x336/0x440 [ 2904.641311] xas_create+0x34a/0x10d0 [ 2904.642239] ? kernel_text_address+0xf2/0x120 [ 2904.643362] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2904.644690] xas_store+0x8c/0x1c40 [ 2904.645589] __xa_store+0x164/0x2d0 [ 2904.646505] ? xa_delete_node+0x280/0x280 [ 2904.647562] ? trace_hardirqs_on+0x5b/0x180 [ 2904.648661] xa_store+0x31/0x50 [ 2904.649584] __io_uring_add_tctx_node+0x1cf/0x520 [ 2904.650787] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2904.652086] ? alloc_fd+0x2e7/0x670 [ 2904.652397] loop2: detected capacity change from 0 to 135266304 [ 2904.653000] io_uring_setup+0x1fbb/0x2980 [ 2904.653032] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2904.656714] ? wait_for_completion_io+0x270/0x270 [ 2904.657955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2904.659275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2904.660555] do_syscall_64+0x33/0x40 [ 2904.661472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2904.662747] RIP: 0033:0x7f9c3da0ab19 [ 2904.663695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2904.668326] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2904.669784] FAT-fs (loop2): bogus number of reserved sectors [ 2904.670202] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2904.670214] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2904.670225] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2904.670250] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2904.671528] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2904.673250] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2904.690130] loop2: detected capacity change from 0 to 135266304 [ 2904.695972] FAT-fs (loop2): bogus number of reserved sectors [ 2904.697338] FAT-fs (loop2): Can't find a valid FAT filesystem 05:13:55 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 72) 05:13:55 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 83) 05:13:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8cffffff, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:13:55 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {0x0}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2904.833106] FAULT_INJECTION: forcing a failure. [ 2904.833106] name failslab, interval 1, probability 0, space 0, times 0 [ 2904.837151] CPU: 1 PID: 14338 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2904.838663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2904.840488] Call Trace: [ 2904.841078] dump_stack+0x107/0x167 [ 2904.841859] should_fail.cold+0x5/0xa [ 2904.842682] ? xas_alloc+0x336/0x440 [ 2904.843511] should_failslab+0x5/0x20 [ 2904.844351] kmem_cache_alloc+0x5b/0x310 [ 2904.845239] xas_alloc+0x336/0x440 [ 2904.846016] xas_create+0x34a/0x10d0 [ 2904.846831] ? kernel_text_address+0xf2/0x120 [ 2904.847831] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2904.848976] xas_store+0x8c/0x1c40 [ 2904.849760] __xa_store+0x164/0x2d0 [ 2904.850555] ? xa_delete_node+0x280/0x280 [ 2904.851481] ? trace_hardirqs_on+0x5b/0x180 [ 2904.852445] xa_store+0x31/0x50 [ 2904.853171] __io_uring_add_tctx_node+0x1cf/0x520 [ 2904.854222] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2904.855359] ? alloc_fd+0x2e7/0x670 [ 2904.856180] io_uring_setup+0x1fbb/0x2980 [ 2904.857089] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2904.858177] ? wait_for_completion_io+0x270/0x270 [ 2904.859243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2904.860401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2904.861512] do_syscall_64+0x33/0x40 [ 2904.862322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2904.863436] RIP: 0033:0x7f9c3da0ab19 [ 2904.864267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2904.868262] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2904.869967] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2904.871906] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2904.873631] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2904.875174] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2904.876744] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 05:13:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r1 = getpgid(0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="3000c8f0031e8678511eb06b921b45c91d06cb121dcee3c0"]) move_pages(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000ffa000/0x3000)=nil], &(0x7f00000008c0), &(0x7f0000000900), 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fork() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x1a, 0x1, 0x1c, 0x0, 0x5, 0x8400, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x19004, 0x9, 0x0, 0x8, 0x3ff, 0xdd, 0xfff, 0x0, 0x1, 0x0, 0x9}, r1, 0xc, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x48, 0x88, 0x2, 0x0, 0x0, 0x1, 0x3062, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x8004, 0x1, 0x8, 0x4, 0x3, 0xba1, 0x8, 0x0, 0x400, 0x0, 0x353}, 0x0, 0x4, r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) creat(&(0x7f0000000300)='./file0\x00', 0xb6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) [ 2904.900579] FAULT_INJECTION: forcing a failure. [ 2904.900579] name failslab, interval 1, probability 0, space 0, times 0 [ 2904.903684] CPU: 0 PID: 14345 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2904.905597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2904.907682] Call Trace: [ 2904.908353] dump_stack+0x107/0x167 [ 2904.909256] should_fail.cold+0x5/0xa [ 2904.910217] ? create_object.isra.0+0x3a/0xa20 [ 2904.911368] should_failslab+0x5/0x20 [ 2904.912332] kmem_cache_alloc+0x5b/0x310 [ 2904.913357] create_object.isra.0+0x3a/0xa20 [ 2904.914446] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2904.915726] kmem_cache_alloc+0x159/0x310 [ 2904.916781] vm_area_alloc+0x1c/0x110 [ 2904.917750] mmap_region+0x97e/0x1500 [ 2904.918719] do_mmap+0xcdb/0x11e0 [ 2904.919600] vm_mmap_pgoff+0x198/0x1f0 [ 2904.920551] ? randomize_page+0xb0/0xb0 [ 2904.921556] ksys_mmap_pgoff+0x41c/0x560 [ 2904.922563] ? find_mergeable_anon_vma+0x250/0x250 [ 2904.923819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2904.925139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2904.926425] do_syscall_64+0x33/0x40 [ 2904.927362] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2904.928672] RIP: 0033:0x7f838ee79b62 [ 2904.929592] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2904.934188] RSP: 002b:00007f838c3ce0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2904.936107] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f838ee79b62 [ 2904.937863] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2904.939632] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2904.941407] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000800 [ 2904.943168] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2904.972143] loop2: detected capacity change from 0 to 135266304 [ 2904.989402] FAT-fs (loop2): bogus number of reserved sectors [ 2904.991141] FAT-fs (loop2): Can't find a valid FAT filesystem 05:13:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x97ffffff, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@dmask}]}) 05:13:56 executing program 6: syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 73) 05:13:56 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c065ac852b96c1940a9c893384b58a2f014e486607a03aa3feb03108a42a9054f6384d3ec6b947cae6baf2a89096cd3088c5152", 0x66}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r1 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) lseek(r1, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r2, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b6500000000ee000b6a2f57", @ANYRES16, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x17c, r4, 0x510, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x616}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8000000}, {0x6, 0x11, 0xf9dd}, {0x8, 0x15, 0x428}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x6859}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a00)=""/84, 0x54}, {0x0}, {&(0x7f0000000b00)=""/157, 0x9d}], 0x7, &(0x7f0000000c40)=""/212, 0xd4}, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x120) [ 2905.150319] loop2: detected capacity change from 0 to 135266304 05:13:56 executing program 0: perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b20, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 84) [ 2905.212976] FAT-fs (loop2): bogus number of reserved sectors [ 2905.214565] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2905.235385] FAULT_INJECTION: forcing a failure. [ 2905.235385] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.238089] CPU: 1 PID: 14360 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2905.239626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.241428] Call Trace: [ 2905.242005] dump_stack+0x107/0x167 [ 2905.242805] should_fail.cold+0x5/0xa [ 2905.243651] ? create_object.isra.0+0x3a/0xa20 [ 2905.244651] should_failslab+0x5/0x20 [ 2905.245482] kmem_cache_alloc+0x5b/0x310 [ 2905.246380] ? mark_held_locks+0x9e/0xe0 [ 2905.247267] create_object.isra.0+0x3a/0xa20 [ 2905.248254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.249361] kmem_cache_alloc+0x159/0x310 [ 2905.250289] xas_alloc+0x336/0x440 [ 2905.251069] xas_create+0x34a/0x10d0 [ 2905.251886] ? kernel_text_address+0xf2/0x120 [ 2905.252857] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2905.254002] xas_store+0x8c/0x1c40 [ 2905.254796] __xa_store+0x164/0x2d0 [ 2905.255606] ? xa_delete_node+0x280/0x280 [ 2905.256516] ? trace_hardirqs_on+0x5b/0x180 [ 2905.257462] xa_store+0x31/0x50 [ 2905.258204] __io_uring_add_tctx_node+0x1cf/0x520 [ 2905.259250] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2905.260406] ? alloc_fd+0x2e7/0x670 [ 2905.261216] io_uring_setup+0x1fbb/0x2980 [ 2905.262144] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2905.263241] ? wait_for_completion_io+0x270/0x270 [ 2905.264326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.265461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.266595] do_syscall_64+0x33/0x40 [ 2905.267408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2905.268529] RIP: 0033:0x7f9c3da0ab19 [ 2905.269343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2905.273364] RSP: 002b:00007f9c3af80108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2905.275000] RAX: ffffffffffffffda RBX: 00007f9c3db1df60 RCX: 00007f9c3da0ab19 [ 2905.276552] RDX: 0000000020ffc000 RSI: 0000000020000740 RDI: 0000000000006b20 [ 2905.278190] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800 [ 2905.279833] R10: 00000000200007c0 R11: 0000000000000202 R12: 0000000020000800 [ 2905.281704] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2905.309215] loop2: detected capacity change from 0 to 135266304 [ 2905.318691] FAT-fs (loop2): bogus number of reserved sectors [ 2905.320267] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2905.402259] FAULT_INJECTION: forcing a failure. [ 2905.402259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2905.405182] CPU: 0 PID: 14368 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2905.406892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.408945] Call Trace: [ 2905.409599] dump_stack+0x107/0x167 [ 2905.410498] should_fail.cold+0x5/0xa [ 2905.411438] __alloc_pages_nodemask+0x182/0x600 [ 2905.412596] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2905.414088] ? walk_mem_res+0x170/0x170 [ 2905.415076] alloc_pages_current+0x187/0x280 [ 2905.416177] pte_alloc_one+0x16/0x1a0 [ 2905.417111] __pte_alloc+0x1d/0x330 [ 2905.418010] remap_pfn_range_internal+0x9a3/0xf60 [ 2905.419183] ? lookup_memtype+0x5b/0x200 [ 2905.420205] ? apply_to_existing_page_range+0x40/0x40 [ 2905.421457] remap_pfn_range+0xcd/0x160 [ 2905.422411] ? remap_pfn_range_notrack+0x70/0x70 [ 2905.423578] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2905.424824] io_uring_mmap+0x398/0x530 [ 2905.425767] mmap_file+0x5e/0xe0 [ 2905.426588] mmap_region+0xc49/0x1500 [ 2905.427529] do_mmap+0xcdb/0x11e0 [ 2905.428372] vm_mmap_pgoff+0x198/0x1f0 [ 2905.429310] ? randomize_page+0xb0/0xb0 [ 2905.430265] ksys_mmap_pgoff+0x41c/0x560 [ 2905.431250] ? find_mergeable_anon_vma+0x250/0x250 [ 2905.432443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.433717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.434963] do_syscall_64+0x33/0x40 [ 2905.435881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2905.437113] RIP: 0033:0x7f838ee79b62 [ 2905.437990] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2905.442441] RSP: 002b:00007f838c3ce0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2905.444282] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f838ee79b62 [ 2905.446004] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2905.447732] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2905.449469] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000800 [ 2905.451183] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2905.636025] ------------[ cut here ]------------ [ 2905.637370] WARNING: CPU: 1 PID: 14368 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2905.639742] Modules linked in: [ 2905.640589] CPU: 1 PID: 14368 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2905.642317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.644410] RIP: 0010:get_pat_info+0x216/0x270 [ 2905.645562] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 41 8a 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 2a 8a 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 a5 98 5a 00 e9 [ 2905.655636] RSP: 0018:ffff88804867f898 EFLAGS: 00010216 [ 2905.656979] RAX: 0000000000013dcd RBX: ffff888017c8b600 RCX: ffffc900009dc000 [ 2905.658758] RDX: 0000000000040000 RSI: ffffffff81124696 RDI: 0000000000000007 [ 2905.660541] RBP: ffff88804867f950 R08: 0000000000000000 R09: ffff88804867f820 [ 2905.662312] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2905.664121] R13: 1ffff110090cff13 R14: 0000000000000000 R15: ffff888017c8b650 [ 2905.665901] FS: 00007f838c3ce700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2905.667930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2905.669390] CR2: 0000555581cea098 CR3: 00000000477da000 CR4: 0000000000350ee0 [ 2905.671184] Call Trace: [ 2905.671876] ? pgprot_writethrough+0xc0/0xc0 [ 2905.673009] ? finish_task_switch+0x126/0x5d0 [ 2905.674147] ? finish_task_switch+0xef/0x5d0 [ 2905.675285] untrack_pfn+0xdc/0x240 [ 2905.676230] ? track_pfn_insert+0x150/0x150 [ 2905.677311] ? lock_downgrade+0x6d0/0x6d0 [ 2905.678359] ? uprobe_munmap+0x1c/0x560 [ 2905.679368] unmap_single_vma+0x1bc/0x300 [ 2905.680421] zap_page_range_single+0x2ce/0x450 [ 2905.681558] ? unmap_single_vma+0x300/0x300 [ 2905.682647] ? remap_pfn_range_internal+0xc56/0xf60 [ 2905.683894] ? lookup_memtype+0x5b/0x200 [ 2905.684920] ? apply_to_existing_page_range+0x40/0x40 [ 2905.686233] remap_pfn_range+0x139/0x160 [ 2905.687253] ? remap_pfn_range_notrack+0x70/0x70 [ 2905.688453] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2905.689969] io_uring_mmap+0x398/0x530 [ 2905.691203] mmap_file+0x5e/0xe0 [ 2905.692273] mmap_region+0xc49/0x1500 [ 2905.693240] do_mmap+0xcdb/0x11e0 [ 2905.694119] vm_mmap_pgoff+0x198/0x1f0 [ 2905.695095] ? randomize_page+0xb0/0xb0 [ 2905.696121] ksys_mmap_pgoff+0x41c/0x560 [ 2905.697147] ? find_mergeable_anon_vma+0x250/0x250 [ 2905.698355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.699650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.700932] do_syscall_64+0x33/0x40 [ 2905.701864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2905.703136] RIP: 0033:0x7f838ee79b62 [ 2905.704094] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2905.708500] RSP: 002b:00007f838c3ce0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2905.710352] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f838ee79b62 [ 2905.712168] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2905.713908] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2905.715645] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000800 [ 2905.717359] R13: 0000000020ffc000 R14: 00000000200007c0 R15: 0000000020ffb000 [ 2905.719097] irq event stamp: 1279 [ 2905.719950] hardirqs last enabled at (1289): [] console_unlock+0x92d/0xb40 [ 2905.721976] hardirqs last disabled at (1298): [] console_unlock+0x839/0xb40 [ 2905.724054] softirqs last enabled at (742): [] asm_call_irq_on_stack+0x12/0x20 [ 2905.726172] softirqs last disabled at (691): [] asm_call_irq_on_stack+0x12/0x20 [ 2905.728295] ---[ end trace e37aeb701ee0d395 ]--- VM DIAGNOSIS: 05:13:56 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff815fc3be RDX=0000000000000001 RSI=ffffffff815fc3cb RDI=0000000000000001 RBP=ffffea00005c34c0 RSP=ffff88800f8ffce0 R8 =0000000000000000 R9 =ffffea00005c34c7 R10=0000000000000000 R11=0000000000000001 R12=0000000000000200 R13=0000000000000000 R14=ffffea00005c3c48 R15=0000000000000000 RIP=ffffffff8140d0c4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f96cf59d900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f96ce9871f0 CR3=000000000e8cc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=000000000ddd062a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=494e4f544f4e4f4d5f454352554f535f XMM01=454d49545f43494e4f544f4e4f4d5f45 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=54a0579ea665dabe0000000000147d28 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=4466dd86e2ed9b1f00000000000ae968 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00002020000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e27c1 RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff88804867f228 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000020 R13=0000000000000020 R14=ffffffff879f5100 R15=dffffc0000000000 RIP=ffffffff822e2818 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f838c3ce700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555581cea098 CR3=00000000477da000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffff00ffffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000