: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4800, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3064.790668] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:38:30 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000003000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000000000000000001000000000000020000000000000080000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea0000000000002000000000000000010000000000000001000100"/384]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 3064.823637] FAULT_INJECTION: forcing a failure. [ 3064.823637] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.826113] CPU: 1 PID: 14190 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3064.827540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.829255] Call Trace: [ 3064.829806] dump_stack+0x107/0x167 [ 3064.830558] should_fail.cold+0x5/0xa [ 3064.831345] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3064.832333] should_failslab+0x5/0x20 [ 3064.833122] kmem_cache_alloc_trace+0x55/0x320 [ 3064.834074] ? ext4_get_group_desc+0x2a0/0x560 [ 3064.835017] ext4_getfsmap_datadev+0x719/0x25c0 [ 3064.835992] ? lock_chain_count+0x20/0x20 [ 3064.836849] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3064.837906] ? do_swap+0x134/0x210 [ 3064.838636] ? sort_r+0x239/0x360 [ 3064.839353] ? ext4_file_open+0xa50/0xa50 [ 3064.840210] ext4_getfsmap+0x695/0x990 [ 3064.840744] FAULT_INJECTION: forcing a failure. [ 3064.840744] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.841025] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3064.844507] ? ext4_fsmap_to_internal+0x260/0x260 [ 3064.845504] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3064.846577] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3064.847643] ext4_ioc_getfsmap+0x2b0/0x620 [ 3064.848500] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3064.849434] ? find_held_lock+0x2c/0x110 [ 3064.850268] ? avc_has_extended_perms+0x675/0xf40 [ 3064.851291] ? lock_downgrade+0x6d0/0x6d0 [ 3064.852135] __ext4_ioctl+0x8ad/0x4220 [ 3064.852949] ? ext4_reset_inode_seed+0x450/0x450 [ 3064.853926] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3064.854997] ? find_held_lock+0x2c/0x110 [ 3064.855835] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3064.857009] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3064.858074] ? do_vfs_ioctl+0x283/0x10d0 [ 3064.858905] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3064.859973] ? generic_block_fiemap+0x60/0x60 [ 3064.860883] ? lock_downgrade+0x6d0/0x6d0 [ 3064.861732] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3064.862719] ? wait_for_completion_io+0x270/0x270 [ 3064.863718] ? selinux_file_ioctl+0xb6/0x270 [ 3064.864617] ? __ext4_ioctl+0x4220/0x4220 [ 3064.865476] __x64_sys_ioctl+0x19a/0x210 [ 3064.866303] do_syscall_64+0x33/0x40 [ 3064.867059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3064.868137] RIP: 0033:0x7f81caa8db19 [ 3064.868911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.872706] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3064.874299] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3064.875770] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3064.877235] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.878710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3064.880191] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3064.881693] CPU: 0 PID: 14191 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3064.883231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.885057] Call Trace: [ 3064.885652] dump_stack+0x107/0x167 [ 3064.886456] should_fail.cold+0x5/0xa [ 3064.887428] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3064.888525] should_failslab+0x5/0x20 [ 3064.889426] kmem_cache_alloc_trace+0x55/0x320 [ 3064.890475] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3064.891609] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3064.892667] ? lock_chain_count+0x20/0x20 [ 3064.893611] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3064.894753] ? do_swap+0x134/0x210 [ 3064.895087] FAULT_INJECTION: forcing a failure. [ 3064.895087] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.895545] ? sort_r+0x239/0x360 [ 3064.895565] ? ext4_file_open+0xa50/0xa50 [ 3064.895590] ext4_getfsmap+0x695/0x990 [ 3064.895611] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3064.895636] ? ext4_fsmap_to_internal+0x260/0x260 [ 3064.895662] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3064.903776] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3064.904922] ext4_ioc_getfsmap+0x2b0/0x620 [ 3064.905871] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3064.906889] ? find_held_lock+0x2c/0x110 [ 3064.907817] ? avc_has_extended_perms+0x675/0xf40 [ 3064.908935] ? lock_downgrade+0x6d0/0x6d0 [ 3064.909869] __ext4_ioctl+0x8ad/0x4220 [ 3064.910748] ? ext4_reset_inode_seed+0x450/0x450 [ 3064.911803] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3064.912971] ? find_held_lock+0x2c/0x110 [ 3064.913897] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3064.915173] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3064.916329] ? do_vfs_ioctl+0x283/0x10d0 [ 3064.917231] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3064.918405] ? generic_block_fiemap+0x60/0x60 [ 3064.919426] ? lock_downgrade+0x6d0/0x6d0 [ 3064.920347] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3064.921432] ? wait_for_completion_io+0x270/0x270 [ 3064.922514] ? selinux_file_ioctl+0xb6/0x270 [ 3064.923499] ? __ext4_ioctl+0x4220/0x4220 [ 3064.924424] __x64_sys_ioctl+0x19a/0x210 [ 3064.925327] do_syscall_64+0x33/0x40 [ 3064.926195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3064.927342] RIP: 0033:0x7f7edf809b19 [ 3064.928172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.932259] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3064.933959] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3064.935549] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3064.937140] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.938730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3064.940316] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3064.941942] CPU: 1 PID: 14193 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3064.943400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.945122] Call Trace: [ 3064.945691] dump_stack+0x107/0x167 [ 3064.946451] should_fail.cold+0x5/0xa [ 3064.947249] ? create_object.isra.0+0x3a/0xa30 [ 3064.948204] should_failslab+0x5/0x20 [ 3064.949012] kmem_cache_alloc+0x5b/0x310 [ 3064.949879] create_object.isra.0+0x3a/0xa30 [ 3064.950788] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3064.951857] kmem_cache_alloc_trace+0x151/0x320 [ 3064.952832] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3064.953828] ? lock_chain_count+0x20/0x20 [ 3064.954687] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3064.955750] ? do_swap+0x134/0x210 [ 3064.956493] ? sort_r+0x239/0x360 19:38:30 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048122f, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3064.957211] ? ext4_file_open+0xa50/0xa50 [ 3064.958355] ext4_getfsmap+0x695/0x990 [ 3064.959171] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3064.960243] ? ext4_fsmap_to_internal+0x260/0x260 [ 3064.961246] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3064.962354] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3064.963425] ext4_ioc_getfsmap+0x2b0/0x620 [ 3064.964299] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3064.965260] ? find_held_lock+0x2c/0x110 [ 3064.966127] ? avc_has_extended_perms+0x675/0xf40 [ 3064.967168] ? lock_downgrade+0x6d0/0x6d0 [ 3064.968030] __ext4_ioctl+0x8ad/0x4220 [ 3064.968851] ? ext4_reset_inode_seed+0x450/0x450 [ 3064.969849] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3064.970953] ? find_held_lock+0x2c/0x110 [ 3064.971815] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3064.973020] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3064.974098] ? do_vfs_ioctl+0x283/0x10d0 [ 3064.974940] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3064.976044] ? generic_block_fiemap+0x60/0x60 [ 3064.976976] ? lock_downgrade+0x6d0/0x6d0 [ 3064.977842] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3064.978846] ? wait_for_completion_io+0x270/0x270 [ 3064.979866] ? selinux_file_ioctl+0xb6/0x270 [ 3064.980781] ? __ext4_ioctl+0x4220/0x4220 [ 3064.981652] __x64_sys_ioctl+0x19a/0x210 [ 3064.982500] do_syscall_64+0x33/0x40 [ 3064.983282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3064.984347] RIP: 0033:0x7fcaa5e39b19 [ 3064.985116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.988958] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3064.990548] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3064.992035] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3064.993516] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.995006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3064.996501] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:38:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 42) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 51) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:30 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x200000, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES32=0x0]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x2, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 3065.144714] FAULT_INJECTION: forcing a failure. [ 3065.144714] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.147417] CPU: 0 PID: 14208 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3065.148965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.150828] Call Trace: [ 3065.151424] dump_stack+0x107/0x167 [ 3065.152251] should_fail.cold+0x5/0xa [ 3065.153110] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3065.154206] should_failslab+0x5/0x20 [ 3065.155058] kmem_cache_alloc_trace+0x55/0x320 [ 3065.155215] FAULT_INJECTION: forcing a failure. [ 3065.155215] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.156078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.156109] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3065.160597] ? lock_chain_count+0x20/0x20 [ 3065.161538] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3065.162682] ? do_swap+0x134/0x210 [ 3065.163469] ? sort_r+0x239/0x360 [ 3065.164239] ? ext4_file_open+0xa50/0xa50 [ 3065.165172] ext4_getfsmap+0x695/0x990 [ 3065.166036] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3065.167174] ? ext4_fsmap_to_internal+0x260/0x260 [ 3065.168276] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3065.169499] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3065.170653] ext4_ioc_getfsmap+0x2b0/0x620 [ 3065.171599] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3065.172616] ? find_held_lock+0x2c/0x110 [ 3065.173538] ? avc_has_extended_perms+0x675/0xf40 [ 3065.174650] ? lock_downgrade+0x6d0/0x6d0 [ 3065.175577] __ext4_ioctl+0x8ad/0x4220 [ 3065.176455] ? ext4_reset_inode_seed+0x450/0x450 [ 3065.177520] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3065.178691] ? find_held_lock+0x2c/0x110 [ 3065.179623] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3065.180905] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3065.182075] ? do_vfs_ioctl+0x283/0x10d0 [ 3065.182988] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3065.184160] ? generic_block_fiemap+0x60/0x60 [ 3065.185173] ? lock_downgrade+0x6d0/0x6d0 [ 3065.186111] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3065.187190] ? wait_for_completion_io+0x270/0x270 [ 3065.188276] ? selinux_file_ioctl+0xb6/0x270 [ 3065.189264] ? __ext4_ioctl+0x4220/0x4220 [ 3065.190216] __x64_sys_ioctl+0x19a/0x210 [ 3065.191138] do_syscall_64+0x33/0x40 [ 3065.191983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.193140] RIP: 0033:0x7fb4d3c71b19 [ 3065.193990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.198151] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3065.199865] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3065.201471] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3065.203068] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.204663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3065.206264] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3065.207900] CPU: 1 PID: 14210 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3065.209373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.211099] Call Trace: [ 3065.211658] dump_stack+0x107/0x167 [ 3065.212419] should_fail.cold+0x5/0xa [ 3065.213225] ? create_object.isra.0+0x3a/0xa30 [ 3065.214186] should_failslab+0x5/0x20 [ 3065.214983] kmem_cache_alloc+0x5b/0x310 [ 3065.215828] ? lock_downgrade+0x6d0/0x6d0 [ 3065.216698] create_object.isra.0+0x3a/0xa30 [ 3065.217625] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.218689] kmem_cache_alloc_trace+0x151/0x320 [ 3065.219670] ext4_getfsmap_datadev+0x719/0x25c0 [ 3065.220669] ? lock_chain_count+0x20/0x20 [ 3065.221539] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3065.222604] ? do_swap+0x134/0x210 [ 3065.223358] ? sort_r+0x239/0x360 [ 3065.224081] ? ext4_file_open+0xa50/0xa50 [ 3065.224947] ext4_getfsmap+0x695/0x990 [ 3065.225772] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3065.226830] ? ext4_fsmap_to_internal+0x260/0x260 [ 3065.227838] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3065.228938] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3065.230038] ext4_ioc_getfsmap+0x2b0/0x620 [ 3065.230920] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3065.231865] ? find_held_lock+0x2c/0x110 [ 3065.232715] ? avc_has_extended_perms+0x675/0xf40 [ 3065.233768] ? lock_downgrade+0x6d0/0x6d0 [ 3065.234647] __ext4_ioctl+0x8ad/0x4220 [ 3065.235475] ? ext4_reset_inode_seed+0x450/0x450 [ 3065.236473] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3065.237567] ? find_held_lock+0x2c/0x110 [ 3065.238427] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3065.239627] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3065.240701] ? do_vfs_ioctl+0x283/0x10d0 [ 3065.241554] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3065.242652] ? generic_block_fiemap+0x60/0x60 [ 3065.243587] ? lock_downgrade+0x6d0/0x6d0 [ 3065.244455] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3065.245466] ? wait_for_completion_io+0x270/0x270 [ 3065.246478] ? selinux_file_ioctl+0xb6/0x270 [ 3065.247394] ? __ext4_ioctl+0x4220/0x4220 [ 3065.248258] __x64_sys_ioctl+0x19a/0x210 [ 3065.249106] do_syscall_64+0x33/0x40 [ 3065.249886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.250954] RIP: 0033:0x7f81caa8db19 [ 3065.251746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.255597] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3065.257182] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3065.258680] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3065.260164] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.261666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3065.263130] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:38:30 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481230, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3065.284558] loop4: detected capacity change from 0 to 32768 [ 3065.296976] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3065.441763] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:38:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:43 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x240fc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x2, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:38:43 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481258, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:38:43 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 77) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:43 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 43) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:43 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c00, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:38:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 52) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3078.320779] loop4: detected capacity change from 0 to 32768 [ 3078.330822] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:38:43 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r3, 0x0, 0x18000, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000400)={0x3, 0xf3, 0x1, 'queue0\x00', 0x3f}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 3078.358835] FAULT_INJECTION: forcing a failure. [ 3078.358835] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.361556] CPU: 0 PID: 14237 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3078.363118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.364979] Call Trace: [ 3078.365596] dump_stack+0x107/0x167 [ 3078.366420] should_fail.cold+0x5/0xa [ 3078.367300] ? create_object.isra.0+0x3a/0xa30 [ 3078.368326] should_failslab+0x5/0x20 [ 3078.369184] kmem_cache_alloc+0x5b/0x310 [ 3078.370111] create_object.isra.0+0x3a/0xa30 [ 3078.371102] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3078.372251] kmem_cache_alloc_trace+0x151/0x320 [ 3078.373300] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3078.374379] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.375511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3078.376680] ? trace_hardirqs_on+0x5b/0x180 [ 3078.377659] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3078.378873] ? do_swap+0x134/0x210 [ 3078.379668] ? sort_r+0x239/0x360 [ 3078.380443] ? ext4_file_open+0xa50/0xa50 [ 3078.381373] ext4_getfsmap+0x695/0x990 [ 3078.382263] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.383402] ? ext4_fsmap_to_internal+0x260/0x260 [ 3078.384481] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3078.385673] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.386828] ext4_ioc_getfsmap+0x2b0/0x620 [ 3078.387770] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3078.388789] ? find_held_lock+0x2c/0x110 [ 3078.389713] ? avc_has_extended_perms+0x675/0xf40 [ 3078.390840] ? lock_downgrade+0x6d0/0x6d0 [ 3078.391781] __ext4_ioctl+0x8ad/0x4220 [ 3078.392671] ? ext4_reset_inode_seed+0x450/0x450 [ 3078.393757] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3078.394935] ? find_held_lock+0x2c/0x110 [ 3078.395870] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3078.397157] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3078.398319] ? do_vfs_ioctl+0x283/0x10d0 [ 3078.399226] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3078.400402] ? generic_block_fiemap+0x60/0x60 [ 3078.401407] ? lock_downgrade+0x6d0/0x6d0 [ 3078.402359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.403446] ? wait_for_completion_io+0x270/0x270 [ 3078.404544] ? selinux_file_ioctl+0xb6/0x270 [ 3078.405549] ? __ext4_ioctl+0x4220/0x4220 [ 3078.406482] __x64_sys_ioctl+0x19a/0x210 [ 3078.407401] do_syscall_64+0x33/0x40 [ 3078.408242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.409395] RIP: 0033:0x7f7edf809b19 [ 3078.410249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.414431] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3078.416152] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3078.417716] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3078.419333] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.420874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.422497] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3078.430672] FAULT_INJECTION: forcing a failure. [ 3078.430672] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.433327] CPU: 0 PID: 14236 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3078.434838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.436692] Call Trace: [ 3078.437253] dump_stack+0x107/0x167 [ 3078.438096] should_fail.cold+0x5/0xa [ 3078.438968] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3078.440012] should_failslab+0x5/0x20 [ 3078.440858] kmem_cache_alloc_trace+0x55/0x320 [ 3078.441907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3078.443083] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3078.444162] ? lock_chain_count+0x20/0x20 [ 3078.445062] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.446204] ? lock_chain_count+0x20/0x20 [ 3078.447157] ? do_swap+0x134/0x210 [ 3078.447972] ? sort_r+0x239/0x360 [ 3078.448770] ? ext4_file_open+0xa50/0xa50 [ 3078.449735] ext4_getfsmap+0x695/0x990 [ 3078.450629] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.451781] ? ext4_fsmap_to_internal+0x260/0x260 [ 3078.452838] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3078.454055] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.455236] ext4_ioc_getfsmap+0x2b0/0x620 [ 3078.456138] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3078.457174] ? find_held_lock+0x2c/0x110 [ 3078.458144] ? avc_has_extended_perms+0x675/0xf40 [ 3078.459292] ? lock_downgrade+0x6d0/0x6d0 [ 3078.460243] __ext4_ioctl+0x8ad/0x4220 [ 3078.461087] ? ext4_reset_inode_seed+0x450/0x450 [ 3078.462163] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3078.463383] ? find_held_lock+0x2c/0x110 [ 3078.464253] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3078.465579] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3078.466764] ? do_vfs_ioctl+0x283/0x10d0 [ 3078.467689] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3078.468839] ? generic_block_fiemap+0x60/0x60 [ 3078.469878] ? lock_downgrade+0x6d0/0x6d0 [ 3078.470844] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.471922] ? wait_for_completion_io+0x270/0x270 [ 3078.473003] ? selinux_file_ioctl+0xb6/0x270 [ 3078.474040] ? __ext4_ioctl+0x4220/0x4220 [ 3078.475007] __x64_sys_ioctl+0x19a/0x210 [ 3078.475912] do_syscall_64+0x33/0x40 [ 3078.476731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.477926] RIP: 0033:0x7fcaa5e39b19 [ 3078.478786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.482958] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3078.484704] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3078.486276] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3078.487910] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.489575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.491234] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3078.530910] FAULT_INJECTION: forcing a failure. [ 3078.530910] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.533426] CPU: 0 PID: 14248 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3078.534904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.536642] Call Trace: [ 3078.537200] dump_stack+0x107/0x167 [ 3078.537981] should_fail.cold+0x5/0xa [ 3078.538794] ? ext4_getfsmap_datadev+0x89d/0x25c0 [ 3078.539828] should_failslab+0x5/0x20 [ 3078.540629] kmem_cache_alloc_trace+0x55/0x320 [ 3078.541592] ? ext4_bg_num_gdb+0x172/0x250 [ 3078.542490] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3078.543486] ? lock_chain_count+0x20/0x20 [ 3078.544356] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.545429] ? do_swap+0x134/0x210 [ 3078.546186] ? sort_r+0x239/0x360 [ 3078.546920] ? ext4_file_open+0xa50/0xa50 [ 3078.547802] ext4_getfsmap+0x695/0x990 [ 3078.548633] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.549721] ? ext4_fsmap_to_internal+0x260/0x260 [ 3078.550747] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3078.551871] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.552972] ext4_ioc_getfsmap+0x2b0/0x620 [ 3078.553891] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3078.554860] ? find_held_lock+0x2c/0x110 [ 3078.555730] ? avc_has_extended_perms+0x675/0xf40 [ 3078.556800] ? lock_downgrade+0x6d0/0x6d0 [ 3078.557693] __ext4_ioctl+0x8ad/0x4220 [ 3078.558539] ? ext4_reset_inode_seed+0x450/0x450 [ 3078.559562] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3078.560676] ? find_held_lock+0x2c/0x110 19:38:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 49) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3078.561564] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3078.563019] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3078.564158] ? do_vfs_ioctl+0x283/0x10d0 [ 3078.565048] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3078.566217] ? generic_block_fiemap+0x60/0x60 [ 3078.567214] ? lock_downgrade+0x6d0/0x6d0 [ 3078.568141] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.569222] ? wait_for_completion_io+0x270/0x270 [ 3078.570300] ? selinux_file_ioctl+0xb6/0x270 [ 3078.571279] ? __ext4_ioctl+0x4220/0x4220 [ 3078.572205] __x64_sys_ioctl+0x19a/0x210 [ 3078.573110] do_syscall_64+0x33/0x40 [ 3078.573946] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.575091] RIP: 0033:0x7f81caa8db19 [ 3078.575925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.580076] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3078.581787] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3078.583398] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3078.585005] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.586636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.588236] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3078.598512] FAULT_INJECTION: forcing a failure. [ 3078.598512] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.601319] CPU: 1 PID: 14240 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3078.602920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.604816] Call Trace: [ 3078.605426] dump_stack+0x107/0x167 [ 3078.606277] should_fail.cold+0x5/0xa [ 3078.607156] ? create_object.isra.0+0x3a/0xa30 [ 3078.608199] should_failslab+0x5/0x20 [ 3078.609071] kmem_cache_alloc+0x5b/0x310 [ 3078.610017] create_object.isra.0+0x3a/0xa30 [ 3078.611022] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3078.612191] kmem_cache_alloc_trace+0x151/0x320 [ 3078.613261] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3078.614351] ? lock_chain_count+0x20/0x20 [ 3078.615302] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.616475] ? do_swap+0x134/0x210 [ 3078.617290] ? sort_r+0x239/0x360 [ 3078.618090] ? ext4_file_open+0xa50/0xa50 [ 3078.619043] ext4_getfsmap+0x695/0x990 [ 3078.619938] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.621106] ? ext4_fsmap_to_internal+0x260/0x260 [ 3078.622219] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3078.623431] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.624614] ext4_ioc_getfsmap+0x2b0/0x620 [ 3078.625589] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3078.626633] ? find_held_lock+0x2c/0x110 [ 3078.627570] ? avc_has_extended_perms+0x675/0xf40 [ 3078.628715] ? lock_downgrade+0x6d0/0x6d0 [ 3078.629676] __ext4_ioctl+0x8ad/0x4220 [ 3078.630563] ? ext4_reset_inode_seed+0x450/0x450 [ 3078.631634] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3078.632811] ? find_held_lock+0x2c/0x110 [ 3078.633736] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3078.635034] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3078.636185] ? do_vfs_ioctl+0x283/0x10d0 [ 3078.637090] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3078.638269] ? generic_block_fiemap+0x60/0x60 [ 3078.639273] ? lock_downgrade+0x6d0/0x6d0 [ 3078.640199] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.641275] ? wait_for_completion_io+0x270/0x270 [ 3078.642374] ? selinux_file_ioctl+0xb6/0x270 [ 3078.643351] ? __ext4_ioctl+0x4220/0x4220 [ 3078.644283] __x64_sys_ioctl+0x19a/0x210 [ 3078.645186] do_syscall_64+0x33/0x40 [ 3078.646028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.647162] RIP: 0033:0x7fb4d3c71b19 [ 3078.648002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.652141] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3078.653857] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3078.655454] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3078.657058] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.658662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.660251] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3078.710573] FAULT_INJECTION: forcing a failure. [ 3078.710573] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.713177] CPU: 1 PID: 14259 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3078.714733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.716582] Call Trace: [ 3078.717177] dump_stack+0x107/0x167 [ 3078.718007] should_fail.cold+0x5/0xa [ 3078.718868] ? create_object.isra.0+0x3a/0xa30 [ 3078.719893] should_failslab+0x5/0x20 [ 3078.720747] kmem_cache_alloc+0x5b/0x310 [ 3078.721682] create_object.isra.0+0x3a/0xa30 [ 3078.722662] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3078.723808] kmem_cache_alloc_trace+0x151/0x320 [ 3078.724869] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3078.725938] ? lock_chain_count+0x20/0x20 [ 3078.726881] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.728027] ? do_swap+0x134/0x210 [ 3078.728824] ? sort_r+0x239/0x360 [ 3078.729651] ? ext4_file_open+0xa50/0xa50 [ 3078.730587] ext4_getfsmap+0x695/0x990 [ 3078.731459] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.732597] ? ext4_fsmap_to_internal+0x260/0x260 [ 3078.733681] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3078.734872] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.736030] ext4_ioc_getfsmap+0x2b0/0x620 [ 3078.736987] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3078.738021] ? find_held_lock+0x2c/0x110 [ 3078.738941] ? avc_has_extended_perms+0x675/0xf40 [ 3078.740060] ? lock_downgrade+0x6d0/0x6d0 [ 3078.740990] __ext4_ioctl+0x8ad/0x4220 [ 3078.741879] ? ext4_reset_inode_seed+0x450/0x450 [ 3078.742940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3078.744123] ? find_held_lock+0x2c/0x110 [ 3078.745056] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3078.746347] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3078.747498] ? do_vfs_ioctl+0x283/0x10d0 [ 3078.748403] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3078.749591] ? generic_block_fiemap+0x60/0x60 [ 3078.750589] ? lock_downgrade+0x6d0/0x6d0 [ 3078.751521] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.752597] ? wait_for_completion_io+0x270/0x270 [ 3078.753690] ? selinux_file_ioctl+0xb6/0x270 [ 3078.754680] ? __ext4_ioctl+0x4220/0x4220 [ 3078.755603] __x64_sys_ioctl+0x19a/0x210 [ 3078.756511] do_syscall_64+0x33/0x40 [ 3078.757353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.758508] RIP: 0033:0x7fcaa5e39b19 [ 3078.759339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.763565] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3078.765245] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3078.766859] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3078.768432] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.770027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.771614] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3078.778014] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:38:44 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 78) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 53) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:44 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000000a) dup2(r1, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000363bdffed7d9f01819305e0d79e723f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000000000000000001000000000000020000000000000080000000000000000000000000004c40f5f400000000000000000000000000000500000020000000f9ea00000000000020000000000000000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000087a903cb8240fd061b19eea57f00"/395]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:38:44 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481263, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:38:44 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 44) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3078.839527] FAULT_INJECTION: forcing a failure. [ 3078.839527] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.842524] CPU: 0 PID: 14267 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3078.843979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.845719] Call Trace: [ 3078.846283] dump_stack+0x107/0x167 [ 3078.847048] should_fail.cold+0x5/0xa [ 3078.847862] ? create_object.isra.0+0x3a/0xa30 [ 3078.848706] FAULT_INJECTION: forcing a failure. [ 3078.848706] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.848833] should_failslab+0x5/0x20 [ 3078.852125] kmem_cache_alloc+0x5b/0x310 [ 3078.852960] create_object.isra.0+0x3a/0xa30 [ 3078.853899] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3078.854974] kmem_cache_alloc_trace+0x151/0x320 [ 3078.855957] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3078.856957] ? lock_chain_count+0x20/0x20 [ 3078.857842] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.858918] ? do_swap+0x134/0x210 [ 3078.859671] ? sort_r+0x239/0x360 [ 3078.860402] ? ext4_file_open+0xa50/0xa50 [ 3078.861293] ext4_getfsmap+0x695/0x990 [ 3078.862116] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.863189] ? ext4_fsmap_to_internal+0x260/0x260 [ 3078.864199] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3078.865315] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.866440] ext4_ioc_getfsmap+0x2b0/0x620 [ 3078.867349] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3078.868305] ? find_held_lock+0x2c/0x110 [ 3078.869160] ? avc_has_extended_perms+0x675/0xf40 [ 3078.870217] ? lock_downgrade+0x6d0/0x6d0 [ 3078.871089] __ext4_ioctl+0x8ad/0x4220 [ 3078.871915] ? ext4_reset_inode_seed+0x450/0x450 [ 3078.872913] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3078.874026] ? find_held_lock+0x2c/0x110 [ 3078.874896] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3078.876100] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3078.877186] ? do_vfs_ioctl+0x283/0x10d0 [ 3078.878044] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3078.879141] ? generic_block_fiemap+0x60/0x60 [ 3078.880081] ? lock_downgrade+0x6d0/0x6d0 [ 3078.880950] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.881968] ? wait_for_completion_io+0x270/0x270 [ 3078.882986] ? selinux_file_ioctl+0xb6/0x270 [ 3078.883912] ? __ext4_ioctl+0x4220/0x4220 [ 3078.884782] __x64_sys_ioctl+0x19a/0x210 [ 3078.885650] do_syscall_64+0x33/0x40 [ 3078.886435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.887508] RIP: 0033:0x7f81caa8db19 [ 3078.888291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.892154] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3078.893764] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3078.895259] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3078.896767] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.898284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.899782] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3078.901352] CPU: 1 PID: 14265 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3078.903179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.905047] Call Trace: [ 3078.905671] dump_stack+0x107/0x167 [ 3078.906493] should_fail.cold+0x5/0xa [ 3078.907352] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3078.908437] should_failslab+0x5/0x20 [ 3078.909284] kmem_cache_alloc_trace+0x55/0x320 [ 3078.910325] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3078.911470] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3078.912526] ? lock_chain_count+0x20/0x20 [ 3078.913461] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.914612] ? do_swap+0x134/0x210 [ 3078.915414] ? sort_r+0x239/0x360 [ 3078.916190] ? ext4_file_open+0xa50/0xa50 [ 3078.917128] ext4_getfsmap+0x695/0x990 [ 3078.918014] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.919157] ? ext4_fsmap_to_internal+0x260/0x260 [ 3078.920258] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3078.921442] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3078.922623] ext4_ioc_getfsmap+0x2b0/0x620 [ 3078.923574] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3078.924599] ? find_held_lock+0x2c/0x110 [ 3078.925529] ? avc_has_extended_perms+0x675/0xf40 [ 3078.926651] ? lock_downgrade+0x6d0/0x6d0 [ 3078.927606] __ext4_ioctl+0x8ad/0x4220 [ 3078.928489] ? ext4_reset_inode_seed+0x450/0x450 [ 3078.929571] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3078.930758] ? find_held_lock+0x2c/0x110 [ 3078.931689] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3078.932980] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3078.934148] ? do_vfs_ioctl+0x283/0x10d0 [ 3078.935058] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3078.936249] ? generic_block_fiemap+0x60/0x60 [ 3078.937258] ? lock_downgrade+0x6d0/0x6d0 [ 3078.938193] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.939272] ? wait_for_completion_io+0x270/0x270 [ 3078.940356] ? selinux_file_ioctl+0xb6/0x270 [ 3078.941344] ? __ext4_ioctl+0x4220/0x4220 [ 3078.942292] __x64_sys_ioctl+0x19a/0x210 [ 3078.943203] do_syscall_64+0x33/0x40 [ 3078.944040] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.945191] RIP: 0033:0x7f7edf809b19 [ 3078.946031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.950154] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3078.951867] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3078.953856] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3078.955451] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.957024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.958604] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3078.974400] loop4: detected capacity change from 0 to 32768 19:38:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 54) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:44 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6600, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:38:44 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481264, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3079.030235] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3079.081916] FAULT_INJECTION: forcing a failure. [ 3079.081916] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.084641] CPU: 0 PID: 14277 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3079.086209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.088083] Call Trace: [ 3079.088681] dump_stack+0x107/0x167 [ 3079.089511] should_fail.cold+0x5/0xa [ 3079.090381] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3079.091492] should_failslab+0x5/0x20 [ 3079.092352] kmem_cache_alloc_trace+0x55/0x320 [ 3079.093384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3079.094539] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3079.095623] ? lock_chain_count+0x20/0x20 [ 3079.096553] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3079.097719] ? do_swap+0x134/0x210 [ 3079.098516] ? sort_r+0x239/0x360 [ 3079.099299] ? ext4_file_open+0xa50/0xa50 [ 3079.100231] ext4_getfsmap+0x695/0x990 [ 3079.101106] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3079.102259] ? ext4_fsmap_to_internal+0x260/0x260 [ 3079.103343] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3079.104533] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3079.105700] ext4_ioc_getfsmap+0x2b0/0x620 [ 3079.106647] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3079.107673] ? find_held_lock+0x2c/0x110 [ 3079.108587] ? avc_has_extended_perms+0x675/0xf40 [ 3079.109719] ? lock_downgrade+0x6d0/0x6d0 [ 3079.110652] __ext4_ioctl+0x8ad/0x4220 [ 3079.111539] ? ext4_reset_inode_seed+0x450/0x450 [ 3079.112610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3079.113797] ? find_held_lock+0x2c/0x110 [ 3079.114733] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3079.116023] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3079.117180] ? do_vfs_ioctl+0x283/0x10d0 [ 3079.118103] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3079.119283] ? generic_block_fiemap+0x60/0x60 [ 3079.120291] ? lock_downgrade+0x6d0/0x6d0 [ 3079.121220] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3079.122315] ? wait_for_completion_io+0x270/0x270 [ 3079.123412] ? selinux_file_ioctl+0xb6/0x270 [ 3079.124400] ? __ext4_ioctl+0x4220/0x4220 [ 3079.125338] __x64_sys_ioctl+0x19a/0x210 [ 3079.126268] do_syscall_64+0x33/0x40 [ 3079.127104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.128254] RIP: 0033:0x7f81caa8db19 [ 3079.129094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.133243] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3079.134993] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3079.136593] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3079.138202] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.139829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3079.141418] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3079.153439] FAULT_INJECTION: forcing a failure. [ 3079.153439] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.155769] CPU: 1 PID: 14280 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3079.157146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.158786] Call Trace: [ 3079.159309] dump_stack+0x107/0x167 [ 3079.160033] should_fail.cold+0x5/0xa [ 3079.160782] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3079.161746] should_failslab+0x5/0x20 [ 3079.162501] kmem_cache_alloc_trace+0x55/0x320 [ 3079.163389] ? ext4_bg_num_gdb+0x172/0x250 [ 3079.164220] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3079.165157] ? lock_chain_count+0x20/0x20 [ 3079.165978] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3079.166986] ? do_swap+0x134/0x210 [ 3079.167686] ? sort_r+0x239/0x360 [ 3079.168371] ? ext4_file_open+0xa50/0xa50 [ 3079.169200] ext4_getfsmap+0x695/0x990 [ 3079.169972] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3079.170967] ? ext4_fsmap_to_internal+0x260/0x260 [ 3079.171912] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3079.172958] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3079.173974] ext4_ioc_getfsmap+0x2b0/0x620 [ 3079.174801] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3079.175692] ? find_held_lock+0x2c/0x110 [ 3079.176502] ? avc_has_extended_perms+0x675/0xf40 [ 3079.177541] ? lock_downgrade+0x6d0/0x6d0 [ 3079.178368] __ext4_ioctl+0x8ad/0x4220 [ 3079.179148] ? ext4_reset_inode_seed+0x450/0x450 [ 3079.180075] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3079.181120] ? find_held_lock+0x2c/0x110 [ 3079.181941] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3079.183080] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3079.184086] ? do_vfs_ioctl+0x283/0x10d0 [ 3079.184893] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3079.185925] ? generic_block_fiemap+0x60/0x60 [ 3079.186798] ? lock_downgrade+0x6d0/0x6d0 [ 3079.187618] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3079.188570] ? wait_for_completion_io+0x270/0x270 [ 3079.189532] ? selinux_file_ioctl+0xb6/0x270 [ 3079.190407] ? __ext4_ioctl+0x4220/0x4220 [ 3079.191220] __x64_sys_ioctl+0x19a/0x210 [ 3079.192014] do_syscall_64+0x33/0x40 [ 3079.192742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.193753] RIP: 0033:0x7fb4d3c71b19 [ 3079.194485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.198124] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3079.199618] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3079.201013] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3079.202419] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.203809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3079.205202] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:38:59 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 45) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:59 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481269, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:38:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 79) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:59 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4010, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000002000000000001000000000000020000000000000080000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea00000000000020000000000000000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000010100"/384]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:38:59 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6800, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:38:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 55) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:38:59 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r4, &(0x7f00000004c0)=""/149, 0x95) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) fcntl$addseals(r1, 0x409, 0x1) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0292520b6fc90fc43180a78f494c71025caa298b1e5046fc6274f8e33"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r4, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3093.936291] loop4: detected capacity change from 0 to 32768 [ 3093.950982] FAULT_INJECTION: forcing a failure. [ 3093.950982] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.954066] CPU: 1 PID: 14300 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3093.955744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3093.957023] FAULT_INJECTION: forcing a failure. [ 3093.957023] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.957750] Call Trace: [ 3093.957783] dump_stack+0x107/0x167 [ 3093.957808] should_fail.cold+0x5/0xa [ 3093.957833] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3093.957853] should_failslab+0x5/0x20 [ 3093.957874] kmem_cache_alloc_trace+0x55/0x320 [ 3093.957901] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3093.967071] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3093.968184] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3093.969371] ? lock_acquire+0x197/0x470 [ 3093.970312] ? find_held_lock+0x2c/0x110 [ 3093.971277] ? mark_lock+0xf5/0x2df0 [ 3093.972154] ? do_swap+0x134/0x210 [ 3093.972992] ? sort_r+0x239/0x360 [ 3093.973814] ? ext4_file_open+0xa50/0xa50 [ 3093.974794] ext4_getfsmap+0x695/0x990 [ 3093.975708] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3093.976898] ? ext4_fsmap_to_internal+0x260/0x260 [ 3093.978042] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3093.979291] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3093.980510] ext4_ioc_getfsmap+0x2b0/0x620 [ 3093.981495] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3093.982572] ? find_held_lock+0x2c/0x110 [ 3093.983535] ? avc_has_extended_perms+0x675/0xf40 [ 3093.984698] ? lock_downgrade+0x6d0/0x6d0 [ 3093.985678] __ext4_ioctl+0x8ad/0x4220 [ 3093.986599] ? ext4_reset_inode_seed+0x450/0x450 [ 3093.987704] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3093.988923] ? find_held_lock+0x2c/0x110 [ 3093.989903] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3093.991247] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3093.992451] ? do_vfs_ioctl+0x283/0x10d0 [ 3093.993397] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3093.994630] ? generic_block_fiemap+0x60/0x60 [ 3093.995672] ? lock_downgrade+0x6d0/0x6d0 [ 3093.996644] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3093.997799] ? wait_for_completion_io+0x270/0x270 [ 3093.998932] ? selinux_file_ioctl+0xb6/0x270 [ 3093.999954] ? __ext4_ioctl+0x4220/0x4220 [ 3094.000925] __x64_sys_ioctl+0x19a/0x210 [ 3094.001882] do_syscall_64+0x33/0x40 [ 3094.002755] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3094.003938] RIP: 0033:0x7f7edf809b19 [ 3094.004800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3094.009326] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3094.011392] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3094.013328] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3094.015247] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3094.017146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3094.019085] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3094.020789] CPU: 0 PID: 14310 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3094.022414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3094.024266] Call Trace: [ 3094.024877] dump_stack+0x107/0x167 [ 3094.025704] should_fail.cold+0x5/0xa [ 3094.026551] ? create_object.isra.0+0x3a/0xa30 [ 3094.027580] should_failslab+0x5/0x20 [ 3094.028432] kmem_cache_alloc+0x5b/0x310 [ 3094.029347] create_object.isra.0+0x3a/0xa30 [ 3094.030345] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3094.031502] kmem_cache_alloc_trace+0x151/0x320 [ 3094.032565] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3094.033669] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.034827] ? lock_acquire+0x197/0x470 [ 3094.035733] ? find_held_lock+0x2c/0x110 [ 3094.036657] ? mark_lock+0xf5/0x2df0 [ 3094.037507] ? do_swap+0x134/0x210 [ 3094.038326] ? sort_r+0x239/0x360 [ 3094.039111] ? ext4_file_open+0xa50/0xa50 [ 3094.040063] ext4_getfsmap+0x695/0x990 [ 3094.040951] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.042121] ? ext4_fsmap_to_internal+0x260/0x260 [ 3094.043217] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3094.044417] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.045614] ext4_ioc_getfsmap+0x2b0/0x620 [ 3094.046587] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3094.047622] ? find_held_lock+0x2c/0x110 [ 3094.048550] ? avc_has_extended_perms+0x675/0xf40 [ 3094.049699] ? lock_downgrade+0x6d0/0x6d0 [ 3094.050645] __ext4_ioctl+0x8ad/0x4220 [ 3094.051547] ? ext4_reset_inode_seed+0x450/0x450 [ 3094.052635] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3094.053838] ? find_held_lock+0x2c/0x110 [ 3094.054780] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3094.056086] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3094.057266] ? do_vfs_ioctl+0x283/0x10d0 [ 3094.058199] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3094.059395] ? generic_block_fiemap+0x60/0x60 [ 3094.060415] ? lock_downgrade+0x6d0/0x6d0 [ 3094.061361] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3094.062467] ? wait_for_completion_io+0x270/0x270 [ 3094.063573] ? selinux_file_ioctl+0xb6/0x270 [ 3094.064577] ? __ext4_ioctl+0x4220/0x4220 [ 3094.065521] __x64_sys_ioctl+0x19a/0x210 [ 3094.066455] do_syscall_64+0x33/0x40 [ 3094.067301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3094.068470] RIP: 0033:0x7f81caa8db19 [ 3094.069313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3094.073486] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3094.075227] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3094.076847] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3094.078479] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3094.080098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3094.081737] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:38:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 80) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3094.093280] FAULT_INJECTION: forcing a failure. [ 3094.093280] name failslab, interval 1, probability 0, space 0, times 0 [ 3094.094420] FAULT_INJECTION: forcing a failure. [ 3094.094420] name failslab, interval 1, probability 0, space 0, times 0 [ 3094.095842] CPU: 1 PID: 14317 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3094.095855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3094.095871] Call Trace: [ 3094.102512] dump_stack+0x107/0x167 [ 3094.103348] should_fail.cold+0x5/0xa [ 3094.104212] ? create_object.isra.0+0x3a/0xa30 [ 3094.105243] should_failslab+0x5/0x20 [ 3094.106120] kmem_cache_alloc+0x5b/0x310 [ 3094.107043] ? lock_downgrade+0x6d0/0x6d0 [ 3094.107979] create_object.isra.0+0x3a/0xa30 [ 3094.108966] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3094.110211] kmem_cache_alloc_trace+0x151/0x320 [ 3094.111551] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3094.112906] ? lock_chain_count+0x20/0x20 [ 3094.114047] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.115246] ? do_swap+0x134/0x210 [ 3094.116062] ? sort_r+0x239/0x360 [ 3094.116868] ? ext4_file_open+0xa50/0xa50 [ 3094.117858] ext4_getfsmap+0x695/0x990 [ 3094.118759] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.119931] ? ext4_fsmap_to_internal+0x260/0x260 [ 3094.121040] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3094.122298] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.123507] ext4_ioc_getfsmap+0x2b0/0x620 [ 3094.124561] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3094.125709] ? find_held_lock+0x2c/0x110 [ 3094.126662] ? avc_has_extended_perms+0x675/0xf40 [ 3094.127813] ? lock_downgrade+0x6d0/0x6d0 [ 3094.128790] __ext4_ioctl+0x8ad/0x4220 [ 3094.129715] ? ext4_reset_inode_seed+0x450/0x450 [ 3094.130818] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3094.132044] ? find_held_lock+0x2c/0x110 [ 3094.133012] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3094.134399] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3094.135591] ? do_vfs_ioctl+0x283/0x10d0 [ 3094.136539] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3094.137783] ? generic_block_fiemap+0x60/0x60 [ 3094.138831] ? lock_downgrade+0x6d0/0x6d0 [ 3094.139791] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3094.140919] ? wait_for_completion_io+0x270/0x270 [ 3094.142113] ? selinux_file_ioctl+0xb6/0x270 [ 3094.143175] ? __ext4_ioctl+0x4220/0x4220 [ 3094.144140] __x64_sys_ioctl+0x19a/0x210 [ 3094.145089] do_syscall_64+0x33/0x40 [ 3094.145970] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3094.147356] RIP: 0033:0x7fb4d3c71b19 [ 3094.148400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3094.153646] RSP: 002b:00007fb4d11c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3094.155824] RAX: ffffffffffffffda RBX: 00007fb4d3d85020 RCX: 00007fb4d3c71b19 [ 3094.157873] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3094.159915] RBP: 00007fb4d11c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3094.161968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3094.163999] R13: 00007ffc6b75877f R14: 00007fb4d11c6300 R15: 0000000000022000 [ 3094.166090] CPU: 0 PID: 14305 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3094.167702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3094.169584] Call Trace: [ 3094.170205] dump_stack+0x107/0x167 [ 3094.171034] should_fail.cold+0x5/0xa [ 3094.171910] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3094.173001] should_failslab+0x5/0x20 [ 3094.173885] kmem_cache_alloc_trace+0x55/0x320 [ 3094.174939] ? ext4_get_group_desc+0x2a0/0x560 [ 3094.175988] ext4_getfsmap_datadev+0x719/0x25c0 [ 3094.177060] ? lock_chain_count+0x20/0x20 [ 3094.178024] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.179192] ? do_swap+0x134/0x210 [ 3094.180010] ? sort_r+0x239/0x360 [ 3094.180802] ? ext4_file_open+0xa50/0xa50 [ 3094.181758] ext4_getfsmap+0x695/0x990 [ 3094.182645] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.183812] ? ext4_fsmap_to_internal+0x260/0x260 [ 3094.184912] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3094.186183] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.187432] ext4_ioc_getfsmap+0x2b0/0x620 [ 3094.188388] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3094.189419] ? find_held_lock+0x2c/0x110 [ 3094.190361] ? avc_has_extended_perms+0x675/0xf40 [ 3094.191498] ? lock_downgrade+0x6d0/0x6d0 [ 3094.192446] __ext4_ioctl+0x8ad/0x4220 [ 3094.193338] ? ext4_reset_inode_seed+0x450/0x450 [ 3094.194445] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3094.195646] ? find_held_lock+0x2c/0x110 [ 3094.196585] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3094.197904] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3094.199080] ? do_vfs_ioctl+0x283/0x10d0 [ 3094.200005] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3094.201198] ? generic_block_fiemap+0x60/0x60 [ 3094.202218] ? lock_downgrade+0x6d0/0x6d0 [ 3094.203160] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3094.204254] ? wait_for_completion_io+0x270/0x270 [ 3094.205353] ? selinux_file_ioctl+0xb6/0x270 [ 3094.206361] ? __ext4_ioctl+0x4220/0x4220 [ 3094.207308] __x64_sys_ioctl+0x19a/0x210 [ 3094.208229] do_syscall_64+0x33/0x40 [ 3094.209086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3094.210271] RIP: 0033:0x7fcaa5e39b19 [ 3094.211126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3094.215303] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3094.217031] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3094.218662] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3094.220285] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3094.221906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3094.223522] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3094.234641] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3094.295176] FAULT_INJECTION: forcing a failure. [ 3094.295176] name failslab, interval 1, probability 0, space 0, times 0 [ 3094.297930] CPU: 0 PID: 14323 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3094.299505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3094.301383] Call Trace: [ 3094.301995] dump_stack+0x107/0x167 [ 3094.302833] should_fail.cold+0x5/0xa [ 3094.303699] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3094.304791] should_failslab+0x5/0x20 [ 3094.305672] kmem_cache_alloc_trace+0x55/0x320 [ 3094.306704] ? ext4_bg_num_gdb+0x172/0x250 [ 3094.307676] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3094.308760] ? lock_chain_count+0x20/0x20 [ 3094.309712] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.310873] ? do_swap+0x134/0x210 [ 3094.311700] ? sort_r+0x239/0x360 [ 3094.312498] ? ext4_file_open+0xa50/0xa50 [ 3094.313449] ext4_getfsmap+0x695/0x990 [ 3094.314347] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.315498] ? ext4_fsmap_to_internal+0x260/0x260 [ 3094.316593] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3094.317798] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3094.318971] ext4_ioc_getfsmap+0x2b0/0x620 [ 3094.319933] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3094.320983] ? find_held_lock+0x2c/0x110 [ 3094.321920] ? avc_has_extended_perms+0x675/0xf40 [ 3094.323047] ? lock_downgrade+0x6d0/0x6d0 [ 3094.323991] __ext4_ioctl+0x8ad/0x4220 [ 3094.324884] ? ext4_reset_inode_seed+0x450/0x450 [ 3094.325965] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3094.327150] ? find_held_lock+0x2c/0x110 [ 3094.328084] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3094.329389] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3094.330569] ? do_vfs_ioctl+0x283/0x10d0 [ 3094.331488] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3094.332676] ? generic_block_fiemap+0x60/0x60 [ 3094.333703] ? lock_downgrade+0x6d0/0x6d0 [ 3094.334639] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3094.335738] ? wait_for_completion_io+0x270/0x270 [ 3094.336848] ? selinux_file_ioctl+0xb6/0x270 [ 3094.337854] ? __ext4_ioctl+0x4220/0x4220 [ 3094.338795] __x64_sys_ioctl+0x19a/0x210 [ 3094.339729] do_syscall_64+0x33/0x40 [ 3094.340581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3094.341746] RIP: 0033:0x7f7edf809b19 [ 3094.342591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3094.346772] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3094.348501] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3094.350128] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3094.351744] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3094.353362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3094.354994] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 19:39:16 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 46) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 51) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:16 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) fcntl$setsig(r1, 0xa, 0x34) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r3, 0x0, 0x18000, 0x80) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x412}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0xa32, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x40000) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:16 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x129040, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000000000000000001000000000000020000000000000080000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea00000000000020000000000000000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004434d4c54e42948cd1885f2dae47829750457d4829ab15f151b50baa56242e8910e1ac8d80dbb5605d3438ff6c1f13811bd1dab94cd3badab2d06fe72f57c881ad5d7fc53ed9baabd6e16eb8514c48b5c912f95ed868c92141992b30bceb6fbcdbbd4acd85f0b002fd9484aa675c182a12378ee29142546fa308ca776179142bfc944f62b561a3859f5616b9678eb0e89a7f7b5257468ced813c7a"]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file2\x00', 0x1f1) 19:39:16 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048126c, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:16 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c00, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:39:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 56) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3110.669118] loop4: detected capacity change from 0 to 32768 19:39:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 81) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3110.683168] FAULT_INJECTION: forcing a failure. [ 3110.683168] name failslab, interval 1, probability 0, space 0, times 0 [ 3110.685631] CPU: 1 PID: 14336 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3110.687105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3110.688841] Call Trace: [ 3110.689403] dump_stack+0x107/0x167 [ 3110.690180] should_fail.cold+0x5/0xa [ 3110.690979] ? create_object.isra.0+0x3a/0xa30 [ 3110.691938] should_failslab+0x5/0x20 [ 3110.692743] kmem_cache_alloc+0x5b/0x310 [ 3110.693592] ? lock_downgrade+0x6d0/0x6d0 [ 3110.694486] create_object.isra.0+0x3a/0xa30 [ 3110.695410] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3110.696473] kmem_cache_alloc_trace+0x151/0x320 [ 3110.697457] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3110.698452] ? lock_chain_count+0x20/0x20 [ 3110.699323] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.700423] ? do_swap+0x134/0x210 [ 3110.701292] ? sort_r+0x239/0x360 [ 3110.702154] ? ext4_file_open+0xa50/0xa50 [ 3110.703030] ext4_getfsmap+0x695/0x990 [ 3110.703845] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.704916] ? ext4_fsmap_to_internal+0x260/0x260 [ 3110.705949] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3110.707059] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.708162] ext4_ioc_getfsmap+0x2b0/0x620 [ 3110.709056] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3110.710027] ? find_held_lock+0x2c/0x110 [ 3110.710883] ? avc_has_extended_perms+0x675/0xf40 [ 3110.711935] ? lock_downgrade+0x6d0/0x6d0 [ 3110.712813] __ext4_ioctl+0x8ad/0x4220 [ 3110.713640] ? ext4_reset_inode_seed+0x450/0x450 [ 3110.714642] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3110.715746] ? find_held_lock+0x2c/0x110 [ 3110.716611] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3110.718071] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3110.719156] ? do_vfs_ioctl+0x283/0x10d0 [ 3110.720208] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3110.721432] ? generic_block_fiemap+0x60/0x60 [ 3110.722386] ? lock_downgrade+0x6d0/0x6d0 [ 3110.723263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3110.724281] ? wait_for_completion_io+0x270/0x270 [ 3110.725304] ? selinux_file_ioctl+0xb6/0x270 [ 3110.726237] ? __ext4_ioctl+0x4220/0x4220 [ 3110.727108] __x64_sys_ioctl+0x19a/0x210 [ 3110.727965] do_syscall_64+0x33/0x40 [ 3110.728746] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3110.729834] RIP: 0033:0x7fb4d3c71b19 [ 3110.730622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3110.734513] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3110.735441] FAULT_INJECTION: forcing a failure. [ 3110.735441] name failslab, interval 1, probability 0, space 0, times 0 [ 3110.736119] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3110.736132] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3110.736143] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.736163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3110.744356] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3110.745886] CPU: 0 PID: 14344 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3110.747304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3110.748976] Call Trace: [ 3110.749514] dump_stack+0x107/0x167 [ 3110.750258] should_fail.cold+0x5/0xa [ 3110.751027] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3110.751987] should_failslab+0x5/0x20 [ 3110.752753] kmem_cache_alloc_trace+0x55/0x320 [ 3110.753667] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3110.754696] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3110.755643] ? lock_chain_count+0x20/0x20 [ 3110.756471] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.757493] ? do_swap+0x134/0x210 [ 3110.758211] ? sort_r+0x239/0x360 [ 3110.758902] ? ext4_file_open+0xa50/0xa50 [ 3110.759743] ext4_getfsmap+0x695/0x990 [ 3110.760520] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.761543] ? ext4_fsmap_to_internal+0x260/0x260 [ 3110.762669] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3110.763779] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.764863] ext4_ioc_getfsmap+0x2b0/0x620 [ 3110.765746] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3110.766755] ? find_held_lock+0x2c/0x110 [ 3110.767618] ? avc_has_extended_perms+0x675/0xf40 [ 3110.768674] ? lock_downgrade+0x6d0/0x6d0 [ 3110.769548] __ext4_ioctl+0x8ad/0x4220 [ 3110.770391] ? ext4_reset_inode_seed+0x450/0x450 [ 3110.771391] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3110.772491] ? find_held_lock+0x2c/0x110 [ 3110.773355] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3110.774584] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3110.775667] ? do_vfs_ioctl+0x283/0x10d0 [ 3110.776529] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3110.777629] ? generic_block_fiemap+0x60/0x60 [ 3110.778588] ? lock_downgrade+0x6d0/0x6d0 [ 3110.779460] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3110.780477] ? wait_for_completion_io+0x270/0x270 [ 3110.781495] ? selinux_file_ioctl+0xb6/0x270 [ 3110.782431] ? __ext4_ioctl+0x4220/0x4220 [ 3110.783306] __x64_sys_ioctl+0x19a/0x210 [ 3110.784169] do_syscall_64+0x33/0x40 [ 3110.784959] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3110.786047] RIP: 0033:0x7f81caa8db19 [ 3110.786833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3110.790724] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3110.792325] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3110.793836] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3110.795329] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.796824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3110.798349] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3110.810163] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3110.838221] FAULT_INJECTION: forcing a failure. [ 3110.838221] name failslab, interval 1, probability 0, space 0, times 0 [ 3110.840914] CPU: 1 PID: 14348 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3110.842380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3110.844123] Call Trace: [ 3110.844694] dump_stack+0x107/0x167 [ 3110.845467] should_fail.cold+0x5/0xa [ 3110.846305] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3110.847307] should_failslab+0x5/0x20 [ 3110.848101] kmem_cache_alloc_trace+0x55/0x320 [ 3110.849055] ? ext4_bg_num_gdb+0x172/0x250 [ 3110.849962] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3110.850954] ? lock_chain_count+0x20/0x20 [ 3110.851829] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.852900] ? do_swap+0x134/0x210 [ 3110.853646] ? sort_r+0x239/0x360 [ 3110.854401] ? ext4_file_open+0xa50/0xa50 [ 3110.855271] ext4_getfsmap+0x695/0x990 [ 3110.856082] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.857143] ? ext4_fsmap_to_internal+0x260/0x260 [ 3110.858169] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3110.859267] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.860333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3110.861424] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3110.862512] ? trace_hardirqs_on+0x5b/0x180 [ 3110.863140] ext4_ioc_getfsmap+0x2b0/0x620 [ 3110.863731] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3110.864376] ? find_held_lock+0x2c/0x110 [ 3110.864956] ? avc_has_extended_perms+0x675/0xf40 [ 3110.865655] ? lock_downgrade+0x6d0/0x6d0 [ 3110.866261] __ext4_ioctl+0x8ad/0x4220 [ 3110.866844] ? ext4_reset_inode_seed+0x450/0x450 [ 3110.867496] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3110.868228] ? find_held_lock+0x2c/0x110 [ 3110.868812] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3110.869613] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3110.870344] ? do_vfs_ioctl+0x283/0x10d0 [ 3110.870917] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3110.871655] ? generic_block_fiemap+0x60/0x60 [ 3110.872286] ? lock_downgrade+0x6d0/0x6d0 [ 3110.872879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3110.873551] ? wait_for_completion_io+0x270/0x270 [ 3110.874229] ? selinux_file_ioctl+0xb6/0x270 [ 3110.874854] ? __ext4_ioctl+0x4220/0x4220 [ 3110.875433] __x64_sys_ioctl+0x19a/0x210 [ 3110.876000] do_syscall_64+0x33/0x40 [ 3110.876531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3110.877245] RIP: 0033:0x7f7edf809b19 [ 3110.877761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3110.880337] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3110.881408] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3110.882407] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3110.883417] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.884407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3110.885397] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3110.911937] FAULT_INJECTION: forcing a failure. [ 3110.911937] name failslab, interval 1, probability 0, space 0, times 0 [ 3110.914646] CPU: 1 PID: 14347 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3110.916208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3110.918081] Call Trace: [ 3110.918678] dump_stack+0x107/0x167 [ 3110.919499] should_fail.cold+0x5/0xa [ 3110.920363] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3110.921445] should_failslab+0x5/0x20 [ 3110.922315] kmem_cache_alloc_trace+0x55/0x320 [ 3110.923342] ? ext4_get_group_desc+0x2a0/0x560 [ 3110.924377] ext4_getfsmap_datadev+0x719/0x25c0 [ 3110.925437] ? lock_chain_count+0x20/0x20 [ 3110.926401] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.927550] ? do_swap+0x134/0x210 [ 3110.928350] ? sort_r+0x239/0x360 [ 3110.929127] ? ext4_file_open+0xa50/0xa50 [ 3110.930070] ext4_getfsmap+0x695/0x990 [ 3110.930944] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.932092] ? ext4_fsmap_to_internal+0x260/0x260 [ 3110.933181] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3110.934375] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3110.935536] ext4_ioc_getfsmap+0x2b0/0x620 [ 3110.936483] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3110.937520] ? find_held_lock+0x2c/0x110 [ 3110.938450] ? avc_has_extended_perms+0x675/0xf40 [ 3110.939586] ? lock_downgrade+0x6d0/0x6d0 [ 3110.940517] __ext4_ioctl+0x8ad/0x4220 [ 3110.941402] ? ext4_reset_inode_seed+0x450/0x450 [ 3110.942474] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3110.943649] ? find_held_lock+0x2c/0x110 [ 3110.944584] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3110.945883] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3110.947043] ? do_vfs_ioctl+0x283/0x10d0 [ 3110.947956] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3110.949130] ? generic_block_fiemap+0x60/0x60 [ 3110.950150] ? lock_downgrade+0x6d0/0x6d0 [ 3110.951081] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3110.952166] ? wait_for_completion_io+0x270/0x270 [ 3110.953256] ? selinux_file_ioctl+0xb6/0x270 [ 3110.954283] ? __ext4_ioctl+0x4220/0x4220 [ 3110.955238] __x64_sys_ioctl+0x19a/0x210 [ 3110.956152] do_syscall_64+0x33/0x40 [ 3110.956997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3110.958165] RIP: 0033:0x7fcaa5e39b19 [ 3110.959009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3110.963150] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3110.964869] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3110.966487] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3110.968101] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.969700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3110.971307] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:39:16 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x50, 0xff, 0x20, 0x7, 0x0, 0x3, 0x80000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0x8}, 0x6030, 0x0, 0x666a, 0x7, 0x3fa3, 0xb8, 0x2, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:16 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 47) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:16 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048126f, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:16 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x5, 0x80}, {0x5, 0x20, 0xeaf9, 0x21, 0x1, 0x8000000010001}]}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:39:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 57) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3111.051106] loop4: detected capacity change from 0 to 32768 [ 3111.053549] FAULT_INJECTION: forcing a failure. [ 3111.053549] name failslab, interval 1, probability 0, space 0, times 0 [ 3111.055483] FAULT_INJECTION: forcing a failure. [ 3111.055483] name failslab, interval 1, probability 0, space 0, times 0 [ 3111.056053] CPU: 0 PID: 14366 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3111.059774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3111.061462] Call Trace: [ 3111.062019] dump_stack+0x107/0x167 [ 3111.062763] should_fail.cold+0x5/0xa [ 3111.063551] ? create_object.isra.0+0x3a/0xa30 [ 3111.064483] should_failslab+0x5/0x20 [ 3111.065258] kmem_cache_alloc+0x5b/0x310 [ 3111.066106] create_object.isra.0+0x3a/0xa30 [ 3111.067004] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3111.068075] kmem_cache_alloc_trace+0x151/0x320 [ 3111.069042] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3111.070041] ? lock_chain_count+0x20/0x20 [ 3111.070889] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.071953] ? do_swap+0x134/0x210 [ 3111.072677] ? sort_r+0x239/0x360 [ 3111.073386] ? ext4_file_open+0xa50/0xa50 [ 3111.074268] ext4_getfsmap+0x695/0x990 [ 3111.075061] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.076126] ? ext4_fsmap_to_internal+0x260/0x260 [ 3111.077111] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3111.078222] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.079279] ext4_ioc_getfsmap+0x2b0/0x620 [ 3111.080164] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3111.081099] ? find_held_lock+0x2c/0x110 [ 3111.081967] ? avc_has_extended_perms+0x675/0xf40 [ 3111.083003] ? lock_downgrade+0x6d0/0x6d0 [ 3111.083882] __ext4_ioctl+0x8ad/0x4220 [ 3111.084685] ? ext4_reset_inode_seed+0x450/0x450 [ 3111.085682] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3111.086767] ? find_held_lock+0x2c/0x110 [ 3111.087633] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3111.088801] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3111.089888] ? do_vfs_ioctl+0x283/0x10d0 [ 3111.090716] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3111.091821] ? generic_block_fiemap+0x60/0x60 [ 3111.092738] ? lock_downgrade+0x6d0/0x6d0 [ 3111.093613] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3111.094605] ? wait_for_completion_io+0x270/0x270 [ 3111.095625] ? selinux_file_ioctl+0xb6/0x270 [ 3111.096523] ? __ext4_ioctl+0x4220/0x4220 [ 3111.097392] __x64_sys_ioctl+0x19a/0x210 [ 3111.098238] do_syscall_64+0x33/0x40 [ 3111.099004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3111.100044] RIP: 0033:0x7f81caa8db19 [ 3111.100802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3111.104555] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3111.106132] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3111.107613] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3111.109114] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3111.110623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3111.112111] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3111.113648] CPU: 1 PID: 14368 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3111.115290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3111.117162] Call Trace: [ 3111.117770] dump_stack+0x107/0x167 [ 3111.118607] should_fail.cold+0x5/0xa [ 3111.119471] ? create_object.isra.0+0x3a/0xa30 [ 3111.120500] should_failslab+0x5/0x20 [ 3111.121363] kmem_cache_alloc+0x5b/0x310 [ 3111.122294] create_object.isra.0+0x3a/0xa30 [ 3111.123283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3111.124434] kmem_cache_alloc_trace+0x151/0x320 [ 3111.125501] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3111.126573] ? lock_chain_count+0x20/0x20 [ 3111.127506] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.128670] ? do_swap+0x134/0x210 [ 3111.129477] ? sort_r+0x239/0x360 [ 3111.130271] ? ext4_file_open+0xa50/0xa50 [ 3111.131208] ext4_getfsmap+0x695/0x990 [ 3111.132091] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.133241] ? ext4_fsmap_to_internal+0x260/0x260 [ 3111.134336] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3111.135532] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.136696] ext4_ioc_getfsmap+0x2b0/0x620 [ 3111.137650] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3111.138689] ? find_held_lock+0x2c/0x110 [ 3111.139607] ? avc_has_extended_perms+0x675/0xf40 [ 3111.140728] ? lock_downgrade+0x6d0/0x6d0 [ 3111.141664] __ext4_ioctl+0x8ad/0x4220 [ 3111.142555] ? ext4_reset_inode_seed+0x450/0x450 [ 3111.143620] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3111.144796] ? find_held_lock+0x2c/0x110 [ 3111.145727] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3111.147025] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3111.148189] ? do_vfs_ioctl+0x283/0x10d0 [ 3111.149103] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3111.150315] ? generic_block_fiemap+0x60/0x60 [ 3111.151316] ? lock_downgrade+0x6d0/0x6d0 [ 3111.152248] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3111.153336] ? wait_for_completion_io+0x270/0x270 [ 3111.154441] ? selinux_file_ioctl+0xb6/0x270 [ 3111.155443] ? __ext4_ioctl+0x4220/0x4220 [ 3111.156364] __x64_sys_ioctl+0x19a/0x210 [ 3111.157246] do_syscall_64+0x33/0x40 [ 3111.158098] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3111.159250] RIP: 0033:0x7fb4d3c71b19 [ 3111.160097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3111.164186] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3111.165856] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3111.167463] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3111.169078] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3111.170703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3111.172300] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:39:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 82) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:16 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7400, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3111.194273] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:39:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 52) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:16 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481270, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3111.263183] FAULT_INJECTION: forcing a failure. [ 3111.263183] name failslab, interval 1, probability 0, space 0, times 0 19:39:16 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3111.265757] CPU: 0 PID: 14382 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3111.267346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3111.269081] Call Trace: [ 3111.269639] dump_stack+0x107/0x167 [ 3111.270426] should_fail.cold+0x5/0xa [ 3111.271230] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3111.272238] should_failslab+0x5/0x20 [ 3111.273037] kmem_cache_alloc_trace+0x55/0x320 [ 3111.274007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3111.275075] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3111.276072] ? lock_chain_count+0x20/0x20 [ 3111.276949] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.278031] ? do_swap+0x134/0x210 [ 3111.278781] ? sort_r+0x239/0x360 [ 3111.279507] ? ext4_file_open+0xa50/0xa50 [ 3111.280381] ext4_getfsmap+0x695/0x990 [ 3111.281199] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.282284] ? ext4_fsmap_to_internal+0x260/0x260 [ 3111.283294] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3111.284401] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.285486] ext4_ioc_getfsmap+0x2b0/0x620 [ 3111.286379] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3111.287336] ? find_held_lock+0x2c/0x110 [ 3111.288200] ? avc_has_extended_perms+0x675/0xf40 [ 3111.289248] ? lock_downgrade+0x6d0/0x6d0 [ 3111.289717] FAULT_INJECTION: forcing a failure. [ 3111.289717] name failslab, interval 1, probability 0, space 0, times 0 [ 3111.290131] __ext4_ioctl+0x8ad/0x4220 [ 3111.290169] ? ext4_reset_inode_seed+0x450/0x450 [ 3111.294598] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3111.295698] ? find_held_lock+0x2c/0x110 [ 3111.296555] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3111.297752] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3111.298833] ? do_vfs_ioctl+0x283/0x10d0 [ 3111.299688] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3111.300792] ? generic_block_fiemap+0x60/0x60 [ 3111.301725] ? lock_downgrade+0x6d0/0x6d0 [ 3111.302606] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3111.303608] ? wait_for_completion_io+0x270/0x270 [ 3111.304627] ? selinux_file_ioctl+0xb6/0x270 [ 3111.305543] ? __ext4_ioctl+0x4220/0x4220 [ 3111.306419] __x64_sys_ioctl+0x19a/0x210 [ 3111.307275] do_syscall_64+0x33/0x40 [ 3111.308061] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3111.309131] RIP: 0033:0x7f7edf809b19 [ 3111.309917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3111.313814] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3111.315408] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3111.316895] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3111.318401] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3111.319890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3111.321387] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3111.322917] CPU: 1 PID: 14388 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3111.324499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3111.326288] Call Trace: [ 3111.326860] dump_stack+0x107/0x167 [ 3111.327641] should_fail.cold+0x5/0xa [ 3111.328459] ? ext4_getfsmap_datadev+0x89d/0x25c0 [ 3111.329497] should_failslab+0x5/0x20 [ 3111.330323] kmem_cache_alloc_trace+0x55/0x320 [ 3111.331302] ? ext4_bg_num_gdb+0x172/0x250 [ 3111.332213] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3111.333236] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.334333] ? lock_chain_count+0x20/0x20 [ 3111.335235] ? mark_lock+0xf5/0x2df0 [ 3111.336034] ? do_swap+0x134/0x210 [ 3111.336809] ? sort_r+0x239/0x360 [ 3111.337557] ? ext4_file_open+0xa50/0xa50 [ 3111.338466] ext4_getfsmap+0x695/0x990 [ 3111.339307] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.340404] ? ext4_fsmap_to_internal+0x260/0x260 [ 3111.341455] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3111.342605] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.343728] ext4_ioc_getfsmap+0x2b0/0x620 [ 3111.344642] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3111.345629] ? find_held_lock+0x2c/0x110 [ 3111.346519] ? avc_has_extended_perms+0x675/0xf40 [ 3111.347608] ? lock_downgrade+0x6d0/0x6d0 [ 3111.348514] __ext4_ioctl+0x8ad/0x4220 [ 3111.349376] ? ext4_reset_inode_seed+0x450/0x450 [ 3111.350415] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3111.351561] ? find_held_lock+0x2c/0x110 [ 3111.352460] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3111.353714] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3111.354850] ? do_vfs_ioctl+0x283/0x10d0 [ 3111.355747] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3111.356888] ? generic_block_fiemap+0x60/0x60 [ 3111.357882] ? lock_downgrade+0x6d0/0x6d0 [ 3111.358800] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3111.359874] ? wait_for_completion_io+0x270/0x270 [ 3111.360924] ? selinux_file_ioctl+0xb6/0x270 [ 3111.361901] ? __ext4_ioctl+0x4220/0x4220 [ 3111.362815] __x64_sys_ioctl+0x19a/0x210 [ 3111.363716] do_syscall_64+0x33/0x40 [ 3111.364536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3111.365660] RIP: 0033:0x7fcaa5e39b19 [ 3111.366463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3111.370495] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3111.372156] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3111.373722] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3111.375354] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3111.376929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3111.378523] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:39:16 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000000000000000001000000000000020000000000000080000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea00000000000020000000000000000100000000000000010001000000000000000000000000000000000000000000007b9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084a6e5450f68cfcad1c4e9d107e2f5dd8e15718ac24293c66660909d2a4002856b2cb0b2509048ba7019ec583a2549c77d7d9302d07b3d7a"]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 3111.446601] FAULT_INJECTION: forcing a failure. [ 3111.446601] name failslab, interval 1, probability 0, space 0, times 0 [ 3111.449357] CPU: 1 PID: 14394 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3111.451017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3111.453020] Call Trace: [ 3111.453658] dump_stack+0x107/0x167 [ 3111.454540] should_fail.cold+0x5/0xa [ 3111.455457] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3111.456626] should_failslab+0x5/0x20 [ 3111.457581] kmem_cache_alloc_trace+0x55/0x320 [ 3111.458713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3111.459907] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3111.460965] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.462205] ? mark_lock+0xf5/0x2df0 [ 3111.463102] ? do_swap+0x134/0x210 [ 3111.463965] ? sort_r+0x239/0x360 [ 3111.464797] ? ext4_file_open+0xa50/0xa50 [ 3111.465817] ext4_getfsmap+0x695/0x990 [ 3111.466780] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.468025] ? ext4_fsmap_to_internal+0x260/0x260 [ 3111.469133] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3111.470378] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.471641] ext4_ioc_getfsmap+0x2b0/0x620 [ 3111.472672] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3111.473648] ? find_held_lock+0x2c/0x110 [ 3111.474667] ? avc_has_extended_perms+0x675/0xf40 [ 3111.475902] __ext4_ioctl+0x8ad/0x4220 [ 3111.476863] ? ext4_reset_inode_seed+0x450/0x450 [ 3111.477981] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3111.479176] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3111.480584] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3111.481689] ? do_vfs_ioctl+0x283/0x10d0 [ 3111.482545] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3111.483642] ? generic_block_fiemap+0x60/0x60 [ 3111.484587] ? lock_downgrade+0x6d0/0x6d0 [ 3111.485463] ? __fget_files+0xa1/0x520 [ 3111.486295] ? selinux_file_ioctl+0xb6/0x270 [ 3111.487228] ? __ext4_ioctl+0x4220/0x4220 [ 3111.488109] __x64_sys_ioctl+0x19a/0x210 [ 3111.488979] do_syscall_64+0x33/0x40 [ 3111.489773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3111.490868] RIP: 0033:0x7fb4d3c71b19 [ 3111.491659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3111.495560] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3111.497179] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3111.498738] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3111.500259] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3111.501797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:39:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 58) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3111.503358] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3111.543677] loop4: detected capacity change from 0 to 32768 [ 3111.554424] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3111.577721] FAULT_INJECTION: forcing a failure. [ 3111.577721] name failslab, interval 1, probability 0, space 0, times 0 [ 3111.580749] CPU: 0 PID: 14401 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3111.582365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3111.584277] Call Trace: [ 3111.584893] dump_stack+0x107/0x167 [ 3111.585737] should_fail.cold+0x5/0xa [ 3111.586631] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3111.587741] should_failslab+0x5/0x20 [ 3111.588623] kmem_cache_alloc_trace+0x55/0x320 [ 3111.589675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3111.590857] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3111.591957] ? lock_chain_count+0x20/0x20 [ 3111.592914] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.594116] ? do_swap+0x134/0x210 [ 3111.594946] ? sort_r+0x239/0x360 [ 3111.595756] ? ext4_file_open+0xa50/0xa50 [ 3111.596716] ext4_getfsmap+0x695/0x990 [ 3111.597617] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.598843] ? ext4_fsmap_to_internal+0x260/0x260 [ 3111.599965] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3111.601217] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3111.602426] ext4_ioc_getfsmap+0x2b0/0x620 [ 3111.603427] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3111.604483] ? find_held_lock+0x2c/0x110 [ 3111.605463] ? avc_has_extended_perms+0x675/0xf40 [ 3111.606661] ? lock_downgrade+0x6d0/0x6d0 [ 3111.607652] __ext4_ioctl+0x8ad/0x4220 [ 3111.608590] ? ext4_reset_inode_seed+0x450/0x450 [ 3111.609722] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3111.610989] ? find_held_lock+0x2c/0x110 [ 3111.611971] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3111.613340] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3111.614578] ? do_vfs_ioctl+0x283/0x10d0 [ 3111.615550] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3111.616803] ? generic_block_fiemap+0x60/0x60 [ 3111.617888] ? lock_downgrade+0x6d0/0x6d0 [ 3111.618869] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3111.620024] ? wait_for_completion_io+0x270/0x270 [ 3111.621181] ? selinux_file_ioctl+0xb6/0x270 [ 3111.622247] ? __ext4_ioctl+0x4220/0x4220 [ 3111.623242] __x64_sys_ioctl+0x19a/0x210 [ 3111.624213] do_syscall_64+0x33/0x40 [ 3111.625102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3111.626336] RIP: 0033:0x7f81caa8db19 [ 3111.627204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3111.631612] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3111.633373] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3111.635080] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3111.636776] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3111.638480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3111.640173] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3111.732030] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:39:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 59) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:29 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4c000, 0x4, 0x0, 0x0, 0xbb, 0xfffffffc}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x7fea, &(0x7f0000000280)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:39:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 53) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 83) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:29 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481275, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:29 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 49) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:29 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) sendfile(r1, r0, &(0x7f00000001c0)=0x7fff, 0x1ff) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r3, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:29 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a00, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3124.609209] FAULT_INJECTION: forcing a failure. [ 3124.609209] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.610871] CPU: 0 PID: 14418 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3124.611773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3124.612801] Call Trace: [ 3124.613134] dump_stack+0x107/0x167 [ 3124.613620] should_fail.cold+0x5/0xa [ 3124.614127] ? create_object.isra.0+0x3a/0xa30 [ 3124.614726] should_failslab+0x5/0x20 [ 3124.615229] kmem_cache_alloc+0x5b/0x310 [ 3124.615743] create_object.isra.0+0x3a/0xa30 [ 3124.616311] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3124.616946] kmem_cache_alloc_trace+0x151/0x320 [ 3124.617559] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3124.618154] ? lock_chain_count+0x20/0x20 [ 3124.618696] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.619360] ? do_swap+0x134/0x210 [ 3124.619821] ? sort_r+0x239/0x360 [ 3124.620275] ? ext4_file_open+0xa50/0xa50 [ 3124.620793] ext4_getfsmap+0x695/0x990 [ 3124.621294] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.621928] ? ext4_fsmap_to_internal+0x260/0x260 [ 3124.622564] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3124.623247] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.623918] ext4_ioc_getfsmap+0x2b0/0x620 [ 3124.624469] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3124.625033] ? find_held_lock+0x2c/0x110 [ 3124.625567] ? avc_has_extended_perms+0x675/0xf40 [ 3124.626225] ? lock_downgrade+0x6d0/0x6d0 [ 3124.626769] __ext4_ioctl+0x8ad/0x4220 [ 3124.627286] ? ext4_reset_inode_seed+0x450/0x450 [ 3124.627906] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3124.628584] ? find_held_lock+0x2c/0x110 [ 3124.629117] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3124.629830] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3124.630507] ? do_vfs_ioctl+0x283/0x10d0 [ 3124.631028] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3124.631674] ? generic_block_fiemap+0x60/0x60 [ 3124.632256] ? lock_downgrade+0x6d0/0x6d0 [ 3124.632771] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3124.633399] ? wait_for_completion_io+0x270/0x270 [ 3124.633896] FAULT_INJECTION: forcing a failure. [ 3124.633896] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.634050] ? selinux_file_ioctl+0xb6/0x270 [ 3124.637160] ? __ext4_ioctl+0x4220/0x4220 [ 3124.637697] __x64_sys_ioctl+0x19a/0x210 [ 3124.638226] do_syscall_64+0x33/0x40 [ 3124.638701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3124.639331] RIP: 0033:0x7f7edf809b19 [ 3124.639791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3124.642164] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3124.643099] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3124.644015] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3124.644927] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3124.645836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3124.646758] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3124.647698] CPU: 1 PID: 14420 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3124.649314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3124.651192] Call Trace: [ 3124.651814] dump_stack+0x107/0x167 [ 3124.652656] should_fail.cold+0x5/0xa [ 3124.653516] ? create_object.isra.0+0x3a/0xa30 [ 3124.654634] should_failslab+0x5/0x20 [ 3124.655523] kmem_cache_alloc+0x5b/0x310 [ 3124.656478] create_object.isra.0+0x3a/0xa30 [ 3124.657432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3124.658625] kmem_cache_alloc_trace+0x151/0x320 [ 3124.659711] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3124.660755] ? lock_chain_count+0x20/0x20 [ 3124.661721] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.662914] ? do_swap+0x134/0x210 [ 3124.663750] ? sort_r+0x239/0x360 [ 3124.664555] ? ext4_file_open+0xa50/0xa50 [ 3124.665453] ext4_getfsmap+0x695/0x990 [ 3124.666367] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.667551] ? ext4_fsmap_to_internal+0x260/0x260 [ 3124.668608] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3124.669832] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.671043] ext4_ioc_getfsmap+0x2b0/0x620 [ 3124.672022] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3124.673081] ? find_held_lock+0x2c/0x110 [ 3124.674035] ? avc_has_extended_perms+0x675/0xf40 [ 3124.675195] ? lock_downgrade+0x6d0/0x6d0 [ 3124.676121] __ext4_ioctl+0x8ad/0x4220 [ 3124.677015] ? ext4_reset_inode_seed+0x450/0x450 [ 3124.678120] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3124.679340] ? find_held_lock+0x2c/0x110 [ 3124.680255] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3124.681522] FAULT_INJECTION: forcing a failure. [ 3124.681522] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.681597] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3124.684165] ? do_vfs_ioctl+0x283/0x10d0 [ 3124.685116] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3124.686293] ? generic_block_fiemap+0x60/0x60 [ 3124.687330] ? lock_downgrade+0x6d0/0x6d0 [ 3124.688295] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3124.689365] ? wait_for_completion_io+0x270/0x270 [ 3124.690501] ? selinux_file_ioctl+0xb6/0x270 [ 3124.691531] ? __ext4_ioctl+0x4220/0x4220 [ 3124.692501] __x64_sys_ioctl+0x19a/0x210 [ 3124.693433] do_syscall_64+0x33/0x40 [ 3124.694310] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3124.695488] RIP: 0033:0x7fcaa5e39b19 [ 3124.696360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3124.700511] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3124.702289] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3124.703913] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3124.705547] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3124.707113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3124.708751] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3124.710355] CPU: 0 PID: 14426 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3124.711194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3124.712202] Call Trace: [ 3124.712523] dump_stack+0x107/0x167 [ 3124.712961] should_fail.cold+0x5/0xa [ 3124.713420] ? create_object.isra.0+0x3a/0xa30 [ 3124.713981] should_failslab+0x5/0x20 [ 3124.714438] kmem_cache_alloc+0x5b/0x310 [ 3124.714925] create_object.isra.0+0x3a/0xa30 [ 3124.715449] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3124.716057] kmem_cache_alloc_trace+0x151/0x320 [ 3124.716631] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3124.717206] ? lock_chain_count+0x20/0x20 [ 3124.717719] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.718332] ? do_swap+0x134/0x210 [ 3124.718758] ? sort_r+0x239/0x360 [ 3124.719173] ? ext4_file_open+0xa50/0xa50 [ 3124.719673] ext4_getfsmap+0x695/0x990 [ 3124.720139] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.720753] ? ext4_fsmap_to_internal+0x260/0x260 [ 3124.721327] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3124.721964] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.722583] ext4_ioc_getfsmap+0x2b0/0x620 [ 3124.723086] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3124.723632] ? find_held_lock+0x2c/0x110 [ 3124.724129] ? avc_has_extended_perms+0x675/0xf40 [ 3124.724734] ? lock_downgrade+0x6d0/0x6d0 [ 3124.725235] __ext4_ioctl+0x8ad/0x4220 [ 3124.725707] ? ext4_reset_inode_seed+0x450/0x450 [ 3124.726292] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3124.726921] ? find_held_lock+0x2c/0x110 [ 3124.727412] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3124.728094] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3124.728437] FAULT_INJECTION: forcing a failure. [ 3124.728437] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.728711] ? do_vfs_ioctl+0x283/0x10d0 [ 3124.728731] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3124.732392] ? generic_block_fiemap+0x60/0x60 [ 3124.732920] ? lock_downgrade+0x6d0/0x6d0 [ 3124.733417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3124.733993] ? wait_for_completion_io+0x270/0x270 [ 3124.734574] ? selinux_file_ioctl+0xb6/0x270 [ 3124.735099] ? __ext4_ioctl+0x4220/0x4220 [ 3124.735594] __x64_sys_ioctl+0x19a/0x210 [ 3124.736073] do_syscall_64+0x33/0x40 [ 3124.736518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3124.737125] RIP: 0033:0x7f81caa8db19 [ 3124.737577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3124.739754] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3124.740654] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3124.741500] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3124.742353] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3124.743195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3124.744043] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:39:30 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 84) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3124.744905] CPU: 1 PID: 14427 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3124.746699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3124.747766] loop4: detected capacity change from 0 to 32768 [ 3124.748684] Call Trace: [ 3124.748709] dump_stack+0x107/0x167 [ 3124.748733] should_fail.cold+0x5/0xa [ 3124.751604] ? create_object.isra.0+0x3a/0xa30 [ 3124.752678] should_failslab+0x5/0x20 [ 3124.753484] kmem_cache_alloc+0x5b/0x310 [ 3124.754447] create_object.isra.0+0x3a/0xa30 [ 3124.755485] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3124.756691] kmem_cache_alloc_trace+0x151/0x320 [ 3124.757683] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3124.758814] ? lock_chain_count+0x20/0x20 [ 3124.759786] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.760886] ? do_swap+0x134/0x210 [ 3124.761733] ? sort_r+0x239/0x360 [ 3124.762558] ? ext4_file_open+0xa50/0xa50 [ 3124.763537] ext4_getfsmap+0x695/0x990 [ 3124.764374] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.765540] ? ext4_fsmap_to_internal+0x260/0x260 [ 3124.766698] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3124.767940] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.769086] ext4_ioc_getfsmap+0x2b0/0x620 [ 3124.770099] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3124.771192] ? find_held_lock+0x2c/0x110 [ 3124.772115] ? avc_has_extended_perms+0x675/0xf40 [ 3124.773228] ? lock_downgrade+0x6d0/0x6d0 [ 3124.774237] __ext4_ioctl+0x8ad/0x4220 [ 3124.775258] ? ext4_reset_inode_seed+0x450/0x450 [ 3124.776453] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 19:39:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 54) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3124.777859] ? find_held_lock+0x2c/0x110 [ 3124.779080] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3124.780445] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3124.781562] ? do_vfs_ioctl+0x283/0x10d0 [ 3124.782435] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3124.783544] ? generic_block_fiemap+0x60/0x60 [ 3124.784491] ? lock_downgrade+0x6d0/0x6d0 [ 3124.785359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3124.786383] ? wait_for_completion_io+0x270/0x270 [ 3124.787403] ? selinux_file_ioctl+0xb6/0x270 [ 3124.788326] ? __ext4_ioctl+0x4220/0x4220 [ 3124.789201] __x64_sys_ioctl+0x19a/0x210 [ 3124.790066] do_syscall_64+0x33/0x40 [ 3124.790837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3124.791920] RIP: 0033:0x7fb4d3c71b19 [ 3124.792703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3124.796626] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3124.798243] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3124.799749] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3124.800833] FAULT_INJECTION: forcing a failure. [ 3124.800833] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.801250] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3124.801261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3124.801273] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3124.805270] CPU: 0 PID: 14436 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3124.806070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3124.807021] Call Trace: [ 3124.807331] dump_stack+0x107/0x167 [ 3124.807750] should_fail.cold+0x5/0xa [ 3124.808187] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3124.808749] should_failslab+0x5/0x20 [ 3124.809185] kmem_cache_alloc_trace+0x55/0x320 [ 3124.809710] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3124.810299] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3124.810849] ? lock_chain_count+0x20/0x20 [ 3124.811320] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.811907] ? do_swap+0x134/0x210 [ 3124.812314] ? sort_r+0x239/0x360 [ 3124.812711] ? ext4_file_open+0xa50/0xa50 [ 3124.813190] ext4_getfsmap+0x695/0x990 [ 3124.813636] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.814233] ? ext4_fsmap_to_internal+0x260/0x260 [ 3124.814800] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3124.815415] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.816009] ext4_ioc_getfsmap+0x2b0/0x620 [ 3124.816501] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3124.817023] ? find_held_lock+0x2c/0x110 [ 3124.817495] ? avc_has_extended_perms+0x675/0xf40 [ 3124.818072] ? lock_downgrade+0x6d0/0x6d0 [ 3124.818552] __ext4_ioctl+0x8ad/0x4220 [ 3124.819005] ? ext4_reset_inode_seed+0x450/0x450 [ 3124.819550] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3124.820151] ? find_held_lock+0x2c/0x110 [ 3124.820622] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3124.821285] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3124.821879] ? do_vfs_ioctl+0x283/0x10d0 [ 3124.822357] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3124.822956] ? generic_block_fiemap+0x60/0x60 [ 3124.823468] ? lock_downgrade+0x6d0/0x6d0 [ 3124.823945] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3124.824499] ? wait_for_completion_io+0x270/0x270 [ 3124.825054] ? selinux_file_ioctl+0xb6/0x270 [ 3124.825559] ? __ext4_ioctl+0x4220/0x4220 [ 3124.826044] __x64_sys_ioctl+0x19a/0x210 [ 3124.826511] do_syscall_64+0x33/0x40 [ 3124.826937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3124.827515] RIP: 0033:0x7fcaa5e39b19 [ 3124.827943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3124.830040] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3124.830912] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3124.831724] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3124.832536] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3124.833343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3124.834161] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3124.846240] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3124.878145] FAULT_INJECTION: forcing a failure. [ 3124.878145] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.879624] CPU: 0 PID: 14441 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3124.880418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3124.881364] Call Trace: [ 3124.881671] dump_stack+0x107/0x167 [ 3124.882099] should_fail.cold+0x5/0xa [ 3124.882537] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3124.883089] should_failslab+0x5/0x20 [ 3124.883528] kmem_cache_alloc_trace+0x55/0x320 [ 3124.884051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3124.884634] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3124.885177] ? lock_chain_count+0x20/0x20 [ 3124.885655] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.886247] ? do_swap+0x134/0x210 [ 3124.886657] ? sort_r+0x239/0x360 [ 3124.887058] ? ext4_file_open+0xa50/0xa50 [ 3124.887533] ext4_getfsmap+0x695/0x990 [ 3124.887978] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.888562] ? ext4_fsmap_to_internal+0x260/0x260 [ 3124.889113] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3124.889715] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3124.890314] ext4_ioc_getfsmap+0x2b0/0x620 [ 3124.890811] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3124.891332] ? find_held_lock+0x2c/0x110 [ 3124.891804] ? avc_has_extended_perms+0x675/0xf40 [ 3124.892377] ? lock_downgrade+0x6d0/0x6d0 [ 3124.892858] __ext4_ioctl+0x8ad/0x4220 [ 3124.893308] ? ext4_reset_inode_seed+0x450/0x450 [ 3124.893855] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3124.894465] ? find_held_lock+0x2c/0x110 [ 3124.894938] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3124.895598] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3124.896191] ? do_vfs_ioctl+0x283/0x10d0 [ 3124.896659] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3124.897257] ? generic_block_fiemap+0x60/0x60 [ 3124.897774] ? lock_downgrade+0x6d0/0x6d0 [ 3124.898263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3124.898813] ? wait_for_completion_io+0x270/0x270 [ 3124.899369] ? selinux_file_ioctl+0xb6/0x270 [ 3124.899870] ? __ext4_ioctl+0x4220/0x4220 [ 3124.900348] __x64_sys_ioctl+0x19a/0x210 [ 3124.900816] do_syscall_64+0x33/0x40 [ 3124.901240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3124.901825] RIP: 0033:0x7f7edf809b19 [ 3124.902257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3124.904358] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3124.905233] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3124.906057] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3124.906876] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3124.907697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3124.908513] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 19:39:30 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481278, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:30 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) r4 = dup2(r3, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x2, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x6a0a, &(0x7f0000000480)={0x0, 0x5ff6, 0x10, 0x0, 0x40000240, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:39:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:30 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x910b, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:39:30 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc04812bb, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 60) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3125.013130] FAULT_INJECTION: forcing a failure. [ 3125.013130] name failslab, interval 1, probability 0, space 0, times 0 [ 3125.015560] CPU: 0 PID: 14454 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3125.016351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3125.017318] Call Trace: [ 3125.017630] dump_stack+0x107/0x167 [ 3125.018052] should_fail.cold+0x5/0xa [ 3125.018492] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3125.019046] should_failslab+0x5/0x20 [ 3125.019482] kmem_cache_alloc_trace+0x55/0x320 [ 3125.020004] ? ext4_get_group_desc+0x2a0/0x560 [ 3125.020528] ext4_getfsmap_datadev+0x719/0x25c0 [ 3125.021069] ? lock_chain_count+0x20/0x20 [ 3125.021545] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.022153] ? do_swap+0x134/0x210 [ 3125.022563] ? sort_r+0x239/0x360 [ 3125.022974] ? ext4_file_open+0xa50/0xa50 [ 3125.023449] ext4_getfsmap+0x695/0x990 [ 3125.023896] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.024476] ? ext4_fsmap_to_internal+0x260/0x260 [ 3125.025030] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3125.025631] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.026226] ext4_ioc_getfsmap+0x2b0/0x620 [ 3125.026709] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3125.027229] ? find_held_lock+0x2c/0x110 [ 3125.027705] ? avc_has_extended_perms+0x675/0xf40 [ 3125.028286] ? lock_downgrade+0x6d0/0x6d0 [ 3125.028765] __ext4_ioctl+0x8ad/0x4220 [ 3125.029223] ? ext4_reset_inode_seed+0x450/0x450 [ 3125.029770] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3125.030380] ? find_held_lock+0x2c/0x110 [ 3125.031012] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3125.031716] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3125.032305] ? do_vfs_ioctl+0x283/0x10d0 [ 3125.032773] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3125.033372] ? generic_block_fiemap+0x60/0x60 [ 3125.033886] ? lock_downgrade+0x6d0/0x6d0 [ 3125.034378] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3125.034933] ? wait_for_completion_io+0x270/0x270 [ 3125.035496] ? selinux_file_ioctl+0xb6/0x270 [ 3125.036006] ? __ext4_ioctl+0x4220/0x4220 [ 3125.036492] __x64_sys_ioctl+0x19a/0x210 [ 3125.036963] do_syscall_64+0x33/0x40 [ 3125.037405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3125.038007] RIP: 0033:0x7fb4d3c71b19 [ 3125.038445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3125.040551] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3125.041424] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3125.042245] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3125.043057] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3125.043882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3125.044707] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:39:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 55) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:30 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 85) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:30 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3125.078153] FAULT_INJECTION: forcing a failure. [ 3125.078153] name failslab, interval 1, probability 0, space 0, times 0 [ 3125.079533] CPU: 0 PID: 14463 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3125.080319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3125.081266] Call Trace: [ 3125.081572] dump_stack+0x107/0x167 [ 3125.081992] should_fail.cold+0x5/0xa [ 3125.082429] ? create_object.isra.0+0x3a/0xa30 [ 3125.082946] should_failslab+0x5/0x20 [ 3125.083381] kmem_cache_alloc+0x5b/0x310 [ 3125.083844] create_object.isra.0+0x3a/0xa30 [ 3125.084337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3125.084921] kmem_cache_alloc_trace+0x151/0x320 [ 3125.085459] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3125.086015] ? lock_chain_count+0x20/0x20 [ 3125.086487] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.087075] ? do_swap+0x134/0x210 [ 3125.087483] ? sort_r+0x239/0x360 [ 3125.087878] ? ext4_file_open+0xa50/0xa50 [ 3125.087958] FAULT_INJECTION: forcing a failure. [ 3125.087958] name failslab, interval 1, probability 0, space 0, times 0 [ 3125.088350] ext4_getfsmap+0x695/0x990 [ 3125.088362] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.088374] ? ext4_fsmap_to_internal+0x260/0x260 [ 3125.088385] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3125.088410] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.093479] ext4_ioc_getfsmap+0x2b0/0x620 [ 3125.093964] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3125.094493] ? find_held_lock+0x2c/0x110 [ 3125.094958] ? avc_has_extended_perms+0x675/0xf40 [ 3125.095530] ? lock_downgrade+0x6d0/0x6d0 [ 3125.096002] __ext4_ioctl+0x8ad/0x4220 [ 3125.096455] ? ext4_reset_inode_seed+0x450/0x450 [ 3125.096992] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3125.097594] ? find_held_lock+0x2c/0x110 [ 3125.098068] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3125.098733] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3125.099315] ? do_vfs_ioctl+0x283/0x10d0 [ 3125.099780] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3125.100373] ? generic_block_fiemap+0x60/0x60 [ 3125.100884] ? lock_downgrade+0x6d0/0x6d0 [ 3125.101364] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3125.101915] ? wait_for_completion_io+0x270/0x270 [ 3125.102477] ? selinux_file_ioctl+0xb6/0x270 [ 3125.102981] ? __ext4_ioctl+0x4220/0x4220 [ 3125.103454] __x64_sys_ioctl+0x19a/0x210 [ 3125.103918] do_syscall_64+0x33/0x40 [ 3125.104342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3125.104925] RIP: 0033:0x7fcaa5e39b19 [ 3125.105347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3125.107450] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3125.108321] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3125.109134] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3125.109955] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3125.110772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3125.111593] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3125.112431] CPU: 1 PID: 14460 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3125.113898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3125.115639] Call Trace: [ 3125.116203] dump_stack+0x107/0x167 [ 3125.116970] should_fail.cold+0x5/0xa [ 3125.117775] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3125.118807] should_failslab+0x5/0x20 [ 3125.119609] kmem_cache_alloc_trace+0x55/0x320 [ 3125.120566] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3125.121646] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3125.122650] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.123718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3125.124824] ? trace_hardirqs_on+0x5b/0x180 [ 3125.125749] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3125.126896] ? do_swap+0x134/0x210 [ 3125.127643] ? sort_r+0x239/0x360 [ 3125.128370] ? ext4_file_open+0xa50/0xa50 [ 3125.129242] ext4_getfsmap+0x695/0x990 [ 3125.130066] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.131136] ? ext4_fsmap_to_internal+0x260/0x260 [ 3125.132145] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3125.133244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3125.134343] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3125.135470] ? trace_hardirqs_on+0x5b/0x180 [ 3125.136368] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.137437] ? memchr_inv+0xb8/0x270 [ 3125.138234] ext4_ioc_getfsmap+0x2b0/0x620 [ 3125.139124] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3125.140075] ? find_held_lock+0x2c/0x110 [ 3125.140935] ? avc_has_extended_perms+0x675/0xf40 [ 3125.141985] ? __ext4_ioctl+0x124/0x4220 [ 3125.142849] ? __sanitizer_cov_trace_switch+0x37/0x80 [ 3125.143935] __ext4_ioctl+0x8ad/0x4220 [ 3125.144767] ? ext4_reset_inode_seed+0x450/0x450 [ 3125.145763] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3125.146861] ? find_held_lock+0x2c/0x110 [ 3125.147726] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3125.148923] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3125.150015] ? do_vfs_ioctl+0x283/0x10d0 [ 3125.150874] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3125.151970] ? generic_block_fiemap+0x60/0x60 [ 3125.152908] ? lock_downgrade+0x6d0/0x6d0 [ 3125.153776] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3125.154804] ? wait_for_completion_io+0x270/0x270 [ 3125.155823] ? selinux_file_ioctl+0xb6/0x270 [ 3125.156754] ? __ext4_ioctl+0x4220/0x4220 [ 3125.157621] __x64_sys_ioctl+0x19a/0x210 [ 3125.158479] do_syscall_64+0x33/0x40 [ 3125.159264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3125.160338] RIP: 0033:0x7f81caa8db19 [ 3125.161116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3125.164974] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3125.166573] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3125.168063] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3125.169543] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3125.171036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3125.172527] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3125.192623] FAULT_INJECTION: forcing a failure. [ 3125.192623] name failslab, interval 1, probability 0, space 0, times 0 [ 3125.195095] CPU: 1 PID: 14466 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3125.196555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3125.198303] Call Trace: [ 3125.198866] dump_stack+0x107/0x167 [ 3125.199639] should_fail.cold+0x5/0xa [ 3125.200441] ? create_object.isra.0+0x3a/0xa30 [ 3125.201398] should_failslab+0x5/0x20 [ 3125.202208] kmem_cache_alloc+0x5b/0x310 [ 3125.203067] create_object.isra.0+0x3a/0xa30 [ 3125.203993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3125.205066] kmem_cache_alloc_trace+0x151/0x320 [ 3125.206061] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3125.207045] ? lock_chain_count+0x20/0x20 [ 3125.207928] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.208998] ? do_swap+0x134/0x210 [ 3125.209746] ? sort_r+0x239/0x360 [ 3125.210487] ? ext4_file_open+0xa50/0xa50 [ 3125.211364] ext4_getfsmap+0x695/0x990 [ 3125.212185] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.213255] ? ext4_fsmap_to_internal+0x260/0x260 [ 3125.214285] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3125.215397] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.216477] ext4_ioc_getfsmap+0x2b0/0x620 [ 3125.217363] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3125.218335] ? find_held_lock+0x2c/0x110 [ 3125.219193] ? avc_has_extended_perms+0x675/0xf40 [ 3125.220242] ? lock_downgrade+0x6d0/0x6d0 [ 3125.221119] __ext4_ioctl+0x8ad/0x4220 [ 3125.221960] ? ext4_reset_inode_seed+0x450/0x450 19:39:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 56) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:30 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3125.222960] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3125.224277] ? find_held_lock+0x2c/0x110 [ 3125.225146] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3125.226363] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3125.227448] ? do_vfs_ioctl+0x283/0x10d0 [ 3125.228303] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3125.229406] ? generic_block_fiemap+0x60/0x60 [ 3125.230364] ? lock_downgrade+0x6d0/0x6d0 [ 3125.231234] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3125.232256] ? wait_for_completion_io+0x270/0x270 [ 3125.233279] ? selinux_file_ioctl+0xb6/0x270 [ 3125.234222] ? __ext4_ioctl+0x4220/0x4220 [ 3125.235100] __x64_sys_ioctl+0x19a/0x210 [ 3125.235961] do_syscall_64+0x33/0x40 [ 3125.236180] FAULT_INJECTION: forcing a failure. [ 3125.236180] name failslab, interval 1, probability 0, space 0, times 0 [ 3125.236744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3125.236757] RIP: 0033:0x7f7edf809b19 [ 3125.236776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3125.236793] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3125.245307] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3125.246808] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3125.248288] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3125.249789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3125.251299] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3125.252827] CPU: 0 PID: 14475 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3125.253632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3125.254584] Call Trace: [ 3125.254891] dump_stack+0x107/0x167 [ 3125.255313] should_fail.cold+0x5/0xa [ 3125.255754] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3125.256308] should_failslab+0x5/0x20 [ 3125.256741] kmem_cache_alloc_trace+0x55/0x320 [ 3125.257264] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3125.257846] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3125.258398] ? lock_chain_count+0x20/0x20 [ 3125.258874] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.259464] ? do_swap+0x134/0x210 [ 3125.259880] ? sort_r+0x239/0x360 [ 3125.260276] ? ext4_file_open+0xa50/0xa50 [ 3125.260755] ext4_getfsmap+0x695/0x990 [ 3125.261201] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.261784] ? ext4_fsmap_to_internal+0x260/0x260 [ 3125.262341] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3125.262947] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3125.263540] ext4_ioc_getfsmap+0x2b0/0x620 [ 3125.264024] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3125.264548] ? find_held_lock+0x2c/0x110 [ 3125.265018] ? avc_has_extended_perms+0x675/0xf40 [ 3125.265589] ? lock_downgrade+0x6d0/0x6d0 [ 3125.266072] __ext4_ioctl+0x8ad/0x4220 [ 3125.266525] ? ext4_reset_inode_seed+0x450/0x450 [ 3125.267071] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3125.267668] ? find_held_lock+0x2c/0x110 [ 3125.268138] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3125.268794] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3125.269384] ? do_vfs_ioctl+0x283/0x10d0 [ 3125.269846] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3125.270448] ? generic_block_fiemap+0x60/0x60 [ 3125.270959] ? lock_downgrade+0x6d0/0x6d0 [ 3125.271431] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3125.271983] ? wait_for_completion_io+0x270/0x270 [ 3125.272535] ? selinux_file_ioctl+0xb6/0x270 [ 3125.273039] ? __ext4_ioctl+0x4220/0x4220 [ 3125.273513] __x64_sys_ioctl+0x19a/0x210 [ 3125.273986] do_syscall_64+0x33/0x40 [ 3125.274418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3125.275008] RIP: 0033:0x7fcaa5e39b19 [ 3125.275434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3125.277532] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3125.278405] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3125.279219] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3125.280029] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3125.280840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3125.281652] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3137.747522] loop4: detected capacity change from 0 to 32768 [ 3137.747731] FAULT_INJECTION: forcing a failure. [ 3137.747731] name failslab, interval 1, probability 0, space 0, times 0 [ 3137.750662] CPU: 1 PID: 14498 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3137.751652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3137.752817] Call Trace: [ 3137.753187] dump_stack+0x107/0x167 [ 3137.753702] should_fail.cold+0x5/0xa [ 3137.754251] ? create_object.isra.0+0x3a/0xa30 [ 3137.754889] should_failslab+0x5/0x20 [ 3137.755420] kmem_cache_alloc+0x5b/0x310 [ 3137.756012] create_object.isra.0+0x3a/0xa30 [ 3137.756636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3137.757342] kmem_cache_alloc_trace+0x151/0x320 [ 3137.758000] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3137.758670] ? lock_chain_count+0x20/0x20 [ 3137.759245] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.759957] ? do_swap+0x134/0x210 [ 3137.760452] ? sort_r+0x239/0x360 [ 3137.760944] ? ext4_file_open+0xa50/0xa50 [ 3137.761523] ext4_getfsmap+0x695/0x990 [ 3137.762078] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.762785] ? ext4_fsmap_to_internal+0x260/0x260 [ 3137.763473] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3137.764207] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.764939] ext4_ioc_getfsmap+0x2b0/0x620 19:39:43 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 51) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 57) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:43 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000000000000000001000000000000020000000000000080000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea0000000000002000000000000000010000000000000001000100"/384]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:39:43 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xe102, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:39:43 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:43 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 86) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 61) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3137.765873] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3137.766590] ? find_held_lock+0x2c/0x110 [ 3137.767373] ? avc_has_extended_perms+0x675/0xf40 [ 3137.768197] ? lock_downgrade+0x6d0/0x6d0 [ 3137.768950] __ext4_ioctl+0x8ad/0x4220 [ 3137.769625] ? ext4_reset_inode_seed+0x450/0x450 [ 3137.770393] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3137.771284] ? find_held_lock+0x2c/0x110 [ 3137.771970] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3137.772790] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3137.773508] ? do_vfs_ioctl+0x283/0x10d0 [ 3137.774082] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3137.774812] ? generic_block_fiemap+0x60/0x60 [ 3137.775447] ? lock_downgrade+0x6d0/0x6d0 [ 3137.776025] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3137.776714] ? wait_for_completion_io+0x270/0x270 [ 3137.776738] FAULT_INJECTION: forcing a failure. [ 3137.776738] name failslab, interval 1, probability 0, space 0, times 0 [ 3137.778941] ? selinux_file_ioctl+0xb6/0x270 [ 3137.779551] ? __ext4_ioctl+0x4220/0x4220 [ 3137.780124] __x64_sys_ioctl+0x19a/0x210 [ 3137.780692] do_syscall_64+0x33/0x40 [ 3137.781207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3137.781919] RIP: 0033:0x7f81caa8db19 [ 3137.782452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3137.784981] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3137.786040] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3137.787037] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3137.788022] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3137.789012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3137.790000] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3137.791040] CPU: 0 PID: 14493 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3137.792557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3137.794312] Call Trace: [ 3137.794876] dump_stack+0x107/0x167 [ 3137.795653] should_fail.cold+0x5/0xa [ 3137.796465] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3137.797477] should_failslab+0x5/0x20 19:39:43 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) [ 3137.798300] kmem_cache_alloc_trace+0x55/0x320 [ 3137.799420] ? ext4_get_group_desc+0x2a0/0x560 [ 3137.800385] ext4_getfsmap_datadev+0x719/0x25c0 [ 3137.801377] ? lock_chain_count+0x20/0x20 [ 3137.802262] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.803336] ? do_swap+0x134/0x210 [ 3137.804084] ? sort_r+0x239/0x360 [ 3137.804819] ? ext4_file_open+0xa50/0xa50 [ 3137.805708] ext4_getfsmap+0x695/0x990 [ 3137.806541] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.807623] ? ext4_fsmap_to_internal+0x260/0x260 [ 3137.808650] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3137.809773] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.810875] ext4_ioc_getfsmap+0x2b0/0x620 [ 3137.811766] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3137.812730] ? find_held_lock+0x2c/0x110 [ 3137.813594] ? avc_has_extended_perms+0x675/0xf40 [ 3137.814653] ? lock_downgrade+0x6d0/0x6d0 [ 3137.815535] __ext4_ioctl+0x8ad/0x4220 [ 3137.816361] ? ext4_reset_inode_seed+0x450/0x450 [ 3137.817361] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3137.818484] ? find_held_lock+0x2c/0x110 [ 3137.819357] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3137.820560] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3137.821655] ? do_vfs_ioctl+0x283/0x10d0 [ 3137.822518] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3137.823624] ? generic_block_fiemap+0x60/0x60 [ 3137.824576] ? lock_downgrade+0x6d0/0x6d0 [ 3137.825444] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3137.826471] ? wait_for_completion_io+0x270/0x270 [ 3137.827499] ? selinux_file_ioctl+0xb6/0x270 [ 3137.828431] ? __ext4_ioctl+0x4220/0x4220 [ 3137.829300] __x64_sys_ioctl+0x19a/0x210 [ 3137.830180] do_syscall_64+0x33/0x40 [ 3137.830966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3137.832056] RIP: 0033:0x7f7edf809b19 [ 3137.832838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3137.836707] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3137.838339] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3137.839835] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3137.841324] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3137.842833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3137.844329] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3137.859717] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3137.866000] FAULT_INJECTION: forcing a failure. [ 3137.866000] name failslab, interval 1, probability 0, space 0, times 0 [ 3137.868722] CPU: 0 PID: 14507 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3137.870197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3137.871933] Call Trace: [ 3137.872491] dump_stack+0x107/0x167 [ 3137.873256] should_fail.cold+0x5/0xa 19:39:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 62) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3137.874058] ? create_object.isra.0+0x3a/0xa30 [ 3137.875158] should_failslab+0x5/0x20 [ 3137.875962] kmem_cache_alloc+0x5b/0x310 [ 3137.876822] create_object.isra.0+0x3a/0xa30 [ 3137.877744] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3137.878855] kmem_cache_alloc_trace+0x151/0x320 [ 3137.879861] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3137.880875] ? lock_chain_count+0x20/0x20 [ 3137.881769] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.882874] ? do_swap+0x134/0x210 [ 3137.883630] ? sort_r+0x239/0x360 [ 3137.884358] ? ext4_file_open+0xa50/0xa50 [ 3137.885236] ext4_getfsmap+0x695/0x990 [ 3137.886061] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.887154] ? ext4_fsmap_to_internal+0x260/0x260 [ 3137.888175] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3137.889298] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.890409] ext4_ioc_getfsmap+0x2b0/0x620 [ 3137.891303] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3137.892266] ? find_held_lock+0x2c/0x110 [ 3137.893139] ? avc_has_extended_perms+0x675/0xf40 [ 3137.894204] ? lock_downgrade+0x6d0/0x6d0 [ 3137.895081] __ext4_ioctl+0x8ad/0x4220 [ 3137.895911] ? ext4_reset_inode_seed+0x450/0x450 [ 3137.896916] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3137.898023] ? find_held_lock+0x2c/0x110 [ 3137.898901] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3137.900116] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3137.901206] ? do_vfs_ioctl+0x283/0x10d0 [ 3137.902074] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3137.903180] ? generic_block_fiemap+0x60/0x60 [ 3137.904129] ? lock_downgrade+0x6d0/0x6d0 [ 3137.905003] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3137.906027] ? wait_for_completion_io+0x270/0x270 [ 3137.907062] ? selinux_file_ioctl+0xb6/0x270 [ 3137.907993] ? __ext4_ioctl+0x4220/0x4220 [ 3137.908875] __x64_sys_ioctl+0x19a/0x210 [ 3137.909726] do_syscall_64+0x33/0x40 [ 3137.910520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3137.911598] RIP: 0033:0x7fcaa5e39b19 [ 3137.912385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3137.916266] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3137.917868] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3137.919421] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3137.920984] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3137.922552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3137.924102] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3137.945351] FAULT_INJECTION: forcing a failure. [ 3137.945351] name failslab, interval 1, probability 0, space 0, times 0 [ 3137.946954] CPU: 1 PID: 14502 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3137.947863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3137.948967] Call Trace: [ 3137.949320] dump_stack+0x107/0x167 [ 3137.949805] should_fail.cold+0x5/0xa [ 3137.950319] ? create_object.isra.0+0x3a/0xa30 [ 3137.950917] should_failslab+0x5/0x20 [ 3137.951422] kmem_cache_alloc+0x5b/0x310 [ 3137.951958] ? lock_downgrade+0x6d0/0x6d0 [ 3137.952507] create_object.isra.0+0x3a/0xa30 [ 3137.953132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3137.953801] kmem_cache_alloc_trace+0x151/0x320 [ 3137.954428] ext4_getfsmap_datadev+0x719/0x25c0 [ 3137.955047] ? lock_chain_count+0x20/0x20 [ 3137.955593] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.956267] ? do_swap+0x134/0x210 [ 3137.956740] ? sort_r+0x239/0x360 [ 3137.957196] ? ext4_file_open+0xa50/0xa50 [ 3137.957745] ext4_getfsmap+0x695/0x990 [ 3137.958268] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.958945] ? ext4_fsmap_to_internal+0x260/0x260 [ 3137.959579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3137.960270] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3137.960964] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3137.961659] ext4_ioc_getfsmap+0x2b0/0x620 [ 3137.962223] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3137.962831] ? find_held_lock+0x2c/0x110 [ 3137.963376] ? avc_has_extended_perms+0x675/0xf40 [ 3137.964034] ? lock_downgrade+0x6d0/0x6d0 [ 3137.964589] __ext4_ioctl+0x8ad/0x4220 [ 3137.965114] ? ext4_reset_inode_seed+0x450/0x450 [ 3137.965742] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3137.966442] ? find_held_lock+0x2c/0x110 [ 3137.966984] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3137.967742] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3137.968424] ? do_vfs_ioctl+0x283/0x10d0 [ 3137.968958] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3137.969642] ? generic_block_fiemap+0x60/0x60 [ 3137.970234] ? lock_downgrade+0x6d0/0x6d0 [ 3137.970779] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3137.971415] ? wait_for_completion_io+0x270/0x270 [ 3137.972049] ? selinux_file_ioctl+0xb6/0x270 [ 3137.972625] ? __ext4_ioctl+0x4220/0x4220 [ 3137.973169] __x64_sys_ioctl+0x19a/0x210 [ 3137.973702] do_syscall_64+0x33/0x40 [ 3137.974195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3137.974866] RIP: 0033:0x7fb4d3c71b19 [ 3137.975352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3137.977762] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3137.978766] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3137.979695] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3137.980626] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3137.981555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3137.982489] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3138.003001] FAULT_INJECTION: forcing a failure. [ 3138.003001] name failslab, interval 1, probability 0, space 0, times 0 [ 3138.004586] CPU: 1 PID: 14515 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3138.005508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3138.006596] Call Trace: [ 3138.006937] dump_stack+0x107/0x167 [ 3138.007410] should_fail.cold+0x5/0xa [ 3138.007903] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3138.008525] should_failslab+0x5/0x20 [ 3138.009015] kmem_cache_alloc_trace+0x55/0x320 [ 3138.009606] ? ext4_bg_num_gdb+0x172/0x250 [ 3138.010164] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3138.010774] ? lock_chain_count+0x20/0x20 [ 3138.011317] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3138.011977] ? do_swap+0x134/0x210 [ 3138.012439] ? sort_r+0x239/0x360 [ 3138.012896] ? ext4_file_open+0xa50/0xa50 [ 3138.013433] ext4_getfsmap+0x695/0x990 [ 3138.013940] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3138.014606] ? ext4_fsmap_to_internal+0x260/0x260 [ 3138.015231] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3138.015917] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3138.016586] ext4_ioc_getfsmap+0x2b0/0x620 [ 3138.017129] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3138.017714] ? find_held_lock+0x2c/0x110 [ 3138.018250] ? avc_has_extended_perms+0x675/0xf40 [ 3138.018892] ? lock_downgrade+0x6d0/0x6d0 [ 3138.019431] __ext4_ioctl+0x8ad/0x4220 [ 3138.019936] ? ext4_reset_inode_seed+0x450/0x450 [ 3138.020548] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3138.021222] ? find_held_lock+0x2c/0x110 [ 3138.021761] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3138.022505] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3138.023165] ? do_vfs_ioctl+0x283/0x10d0 [ 3138.023686] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3138.024354] ? generic_block_fiemap+0x60/0x60 [ 3138.024935] ? lock_downgrade+0x6d0/0x6d0 [ 3138.025471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3138.026102] ? wait_for_completion_io+0x270/0x270 [ 3138.026735] ? selinux_file_ioctl+0xb6/0x270 [ 3138.027307] ? __ext4_ioctl+0x4220/0x4220 [ 3138.027843] __x64_sys_ioctl+0x19a/0x210 [ 3138.028368] do_syscall_64+0x33/0x40 [ 3138.028846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3138.029505] RIP: 0033:0x7f81caa8db19 [ 3138.029984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3138.032347] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3138.033314] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3138.034225] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3138.035133] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3138.036039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3138.036945] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:39:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 87) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 52) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 58) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 63) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:58 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:58 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) creat(&(0x7f00000001c0)='./file0\x00', 0x77) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8ca7515000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:39:58 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000000000000000001000000800000020000000000000080000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea000000000000200000000000000000000000000000000100010000000000003cb0adf09a5c9fed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029d75242731b21000000000021816326d0d6956beaa2b72b050617b71410acf795b941fed2dc076927fcfaa4a0203904ecf7f66fd3d1000000000000"]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:39:58 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xe903, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3153.282078] FAULT_INJECTION: forcing a failure. [ 3153.282078] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.283855] CPU: 0 PID: 14528 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3153.284791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3153.285894] Call Trace: [ 3153.286263] dump_stack+0x107/0x167 [ 3153.286756] should_fail.cold+0x5/0xa [ 3153.287268] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3153.287917] should_failslab+0x5/0x20 [ 3153.288431] kmem_cache_alloc_trace+0x55/0x320 [ 3153.288737] FAULT_INJECTION: forcing a failure. [ 3153.288737] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.289046] ? ext4_get_group_desc+0x2a0/0x560 [ 3153.289065] ext4_getfsmap_datadev+0x719/0x25c0 [ 3153.292817] ? lock_chain_count+0x20/0x20 [ 3153.293373] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.294067] ? do_swap+0x134/0x210 [ 3153.294556] ? sort_r+0x239/0x360 [ 3153.295021] ? ext4_file_open+0xa50/0xa50 [ 3153.295585] ext4_getfsmap+0x695/0x990 [ 3153.296107] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.296796] ? ext4_fsmap_to_internal+0x260/0x260 [ 3153.297442] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3153.298148] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.298855] ext4_ioc_getfsmap+0x2b0/0x620 [ 3153.299424] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3153.300032] ? find_held_lock+0x2c/0x110 [ 3153.300576] ? avc_has_extended_perms+0x675/0xf40 [ 3153.301252] ? lock_downgrade+0x6d0/0x6d0 [ 3153.301807] __ext4_ioctl+0x8ad/0x4220 [ 3153.302393] ? ext4_reset_inode_seed+0x450/0x450 [ 3153.303029] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3153.303726] ? find_held_lock+0x2c/0x110 [ 3153.304280] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3153.305055] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3153.305749] ? do_vfs_ioctl+0x283/0x10d0 [ 3153.306287] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3153.306988] ? generic_block_fiemap+0x60/0x60 [ 3153.307579] ? lock_downgrade+0x6d0/0x6d0 [ 3153.308137] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3153.308785] ? wait_for_completion_io+0x270/0x270 [ 3153.309430] ? selinux_file_ioctl+0xb6/0x270 [ 3153.310028] ? __ext4_ioctl+0x4220/0x4220 [ 3153.310588] __x64_sys_ioctl+0x19a/0x210 [ 3153.311139] do_syscall_64+0x33/0x40 [ 3153.311636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3153.312311] RIP: 0033:0x7fb4d3c71b19 [ 3153.312800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3153.315266] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.316281] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3153.317244] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3153.318196] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.319150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.320109] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3153.321084] CPU: 1 PID: 14531 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3153.322671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3153.324538] Call Trace: [ 3153.325016] FAULT_INJECTION: forcing a failure. [ 3153.325016] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.325125] dump_stack+0x107/0x167 [ 3153.327422] should_fail.cold+0x5/0xa [ 3153.328272] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3153.329341] should_failslab+0x5/0x20 [ 3153.330196] kmem_cache_alloc_trace+0x55/0x320 [ 3153.331251] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3153.332398] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3153.333468] ? lock_chain_count+0x20/0x20 [ 3153.334423] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.335586] ? do_swap+0x134/0x210 [ 3153.336397] ? sort_r+0x239/0x360 [ 3153.337183] ? ext4_file_open+0xa50/0xa50 [ 3153.338128] ext4_getfsmap+0x695/0x990 [ 3153.339036] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.340195] ? ext4_fsmap_to_internal+0x260/0x260 [ 3153.341290] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3153.342507] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.343686] ext4_ioc_getfsmap+0x2b0/0x620 [ 3153.344652] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3153.345686] ? find_held_lock+0x2c/0x110 [ 3153.346620] ? avc_has_extended_perms+0x675/0xf40 [ 3153.347728] ? lock_downgrade+0x6d0/0x6d0 [ 3153.348655] __ext4_ioctl+0x8ad/0x4220 [ 3153.349553] ? ext4_reset_inode_seed+0x450/0x450 [ 3153.350637] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3153.351816] ? find_held_lock+0x2c/0x110 [ 3153.352749] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3153.354051] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3153.355227] ? do_vfs_ioctl+0x283/0x10d0 [ 3153.356147] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3153.357324] ? generic_block_fiemap+0x60/0x60 [ 3153.358350] ? lock_downgrade+0x6d0/0x6d0 [ 3153.359286] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3153.360376] ? wait_for_completion_io+0x270/0x270 [ 3153.361476] ? selinux_file_ioctl+0xb6/0x270 [ 3153.362480] ? __ext4_ioctl+0x4220/0x4220 [ 3153.363414] __x64_sys_ioctl+0x19a/0x210 [ 3153.364329] do_syscall_64+0x33/0x40 [ 3153.365173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3153.366337] RIP: 0033:0x7f81caa8db19 [ 3153.367175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3153.371282] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.372984] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3153.374584] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3153.376169] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.377752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.379355] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3153.380964] CPU: 0 PID: 14530 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3153.381878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3153.382948] Call Trace: [ 3153.383291] dump_stack+0x107/0x167 [ 3153.383760] should_fail.cold+0x5/0xa [ 3153.384245] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3153.384851] should_failslab+0x5/0x20 [ 3153.385343] kmem_cache_alloc_trace+0x55/0x320 [ 3153.385925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3153.386577] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3153.387183] ? lock_chain_count+0x20/0x20 [ 3153.387717] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.388370] ? do_swap+0x134/0x210 [ 3153.388830] ? sort_r+0x239/0x360 [ 3153.389276] ? ext4_file_open+0xa50/0xa50 [ 3153.389812] ext4_getfsmap+0x695/0x990 [ 3153.390329] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.390784] FAULT_INJECTION: forcing a failure. [ 3153.390784] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.390975] ? ext4_fsmap_to_internal+0x260/0x260 [ 3153.390987] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3153.391015] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.395328] ext4_ioc_getfsmap+0x2b0/0x620 [ 3153.395858] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3153.396428] ? find_held_lock+0x2c/0x110 [ 3153.396942] ? avc_has_extended_perms+0x675/0xf40 [ 3153.397572] ? lock_downgrade+0x6d0/0x6d0 [ 3153.398099] __ext4_ioctl+0x8ad/0x4220 [ 3153.398604] ? ext4_reset_inode_seed+0x450/0x450 [ 3153.399220] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3153.399877] ? find_held_lock+0x2c/0x110 [ 3153.400396] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3153.401118] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3153.401773] ? do_vfs_ioctl+0x283/0x10d0 [ 3153.402289] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3153.402945] ? generic_block_fiemap+0x60/0x60 [ 3153.403506] ? lock_downgrade+0x6d0/0x6d0 [ 3153.404028] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3153.404636] ? wait_for_completion_io+0x270/0x270 [ 3153.405257] ? selinux_file_ioctl+0xb6/0x270 [ 3153.405820] ? __ext4_ioctl+0x4220/0x4220 [ 3153.406354] __x64_sys_ioctl+0x19a/0x210 [ 3153.406868] do_syscall_64+0x33/0x40 [ 3153.407343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3153.408006] RIP: 0033:0x7f7edf809b19 [ 3153.408491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3153.410813] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.411801] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3153.412715] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3153.413628] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.414563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.415474] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3153.416404] CPU: 1 PID: 14543 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3153.417944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3153.419787] Call Trace: [ 3153.420371] dump_stack+0x107/0x167 [ 3153.421179] should_fail.cold+0x5/0xa [ 3153.422024] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3153.423103] should_failslab+0x5/0x20 [ 3153.423944] kmem_cache_alloc_trace+0x55/0x320 [ 3153.424947] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3153.426077] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3153.427131] ? lock_chain_count+0x20/0x20 [ 3153.428044] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.429152] ? do_swap+0x134/0x210 [ 3153.429925] ? sort_r+0x239/0x360 [ 3153.430680] ? ext4_file_open+0xa50/0xa50 [ 3153.431583] ext4_getfsmap+0x695/0x990 [ 3153.432417] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.433516] ? ext4_fsmap_to_internal+0x260/0x260 [ 3153.434560] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3153.435707] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.436823] ext4_ioc_getfsmap+0x2b0/0x620 [ 3153.437728] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3153.438732] ? find_held_lock+0x2c/0x110 [ 3153.439606] ? avc_has_extended_perms+0x675/0xf40 [ 3153.440684] ? lock_downgrade+0x6d0/0x6d0 [ 3153.441577] __ext4_ioctl+0x8ad/0x4220 [ 3153.442446] ? ext4_reset_inode_seed+0x450/0x450 [ 3153.443474] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3153.444594] ? find_held_lock+0x2c/0x110 [ 3153.445472] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3153.446722] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3153.447819] ? do_vfs_ioctl+0x283/0x10d0 [ 3153.448685] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3153.449802] ? generic_block_fiemap+0x60/0x60 [ 3153.450776] ? lock_downgrade+0x6d0/0x6d0 [ 3153.451683] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3153.452706] ? wait_for_completion_io+0x270/0x270 [ 3153.453748] ? selinux_file_ioctl+0xb6/0x270 [ 3153.454702] ? __ext4_ioctl+0x4220/0x4220 [ 3153.455592] __x64_sys_ioctl+0x19a/0x210 [ 3153.456458] do_syscall_64+0x33/0x40 [ 3153.457256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3153.458371] RIP: 0033:0x7fcaa5e39b19 [ 3153.459169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3153.463101] RSP: 002b:00007fcaa338e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.464736] RAX: ffffffffffffffda RBX: 00007fcaa5f4d020 RCX: 00007fcaa5e39b19 [ 3153.466271] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3153.467780] RBP: 00007fcaa338e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.469286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.470807] R13: 00007fff7bb2951f R14: 00007fcaa338e300 R15: 0000000000022000 19:39:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 88) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 53) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3153.475072] loop4: detected capacity change from 0 to 32768 [ 3153.500202] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:39:58 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x1) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3153.568216] FAULT_INJECTION: forcing a failure. [ 3153.568216] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.571224] CPU: 1 PID: 14554 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3153.572845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3153.574772] Call Trace: [ 3153.575387] dump_stack+0x107/0x167 [ 3153.576241] should_fail.cold+0x5/0xa [ 3153.577118] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3153.578243] should_failslab+0x5/0x20 [ 3153.579122] kmem_cache_alloc_trace+0x55/0x320 [ 3153.580173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3153.581337] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3153.582442] ? lock_chain_count+0x20/0x20 [ 3153.583409] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.584587] ? do_swap+0x134/0x210 [ 3153.585430] ? sort_r+0x239/0x360 [ 3153.586249] ? ext4_file_open+0xa50/0xa50 [ 3153.587222] ext4_getfsmap+0x695/0x990 [ 3153.588118] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.589296] ? ext4_fsmap_to_internal+0x260/0x260 [ 3153.590403] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3153.591619] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.592812] ext4_ioc_getfsmap+0x2b0/0x620 [ 3153.593785] ? ext4_ioctl_setflags+0xbe0/0xbe0 19:39:58 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3153.595083] ? find_held_lock+0x2c/0x110 [ 3153.596324] ? avc_has_extended_perms+0x675/0xf40 [ 3153.597561] ? lock_downgrade+0x6d0/0x6d0 [ 3153.598531] __ext4_ioctl+0x8ad/0x4220 [ 3153.599450] ? ext4_reset_inode_seed+0x450/0x450 [ 3153.600534] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3153.601686] ? find_held_lock+0x2c/0x110 [ 3153.602635] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3153.603864] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3153.605027] ? do_vfs_ioctl+0x283/0x10d0 [ 3153.605962] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3153.607092] ? generic_block_fiemap+0x60/0x60 [ 3153.608113] ? lock_downgrade+0x6d0/0x6d0 [ 3153.609069] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3153.610075] ? wait_for_completion_io+0x270/0x270 [ 3153.611201] ? selinux_file_ioctl+0xb6/0x270 [ 3153.612204] ? __ext4_ioctl+0x4220/0x4220 [ 3153.613062] __x64_sys_ioctl+0x19a/0x210 [ 3153.613997] do_syscall_64+0x33/0x40 [ 3153.614864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3153.615940] RIP: 0033:0x7f81caa8db19 [ 3153.616789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3153.620934] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.622697] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3153.624330] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3153.625906] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.627522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.629112] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3153.653732] FAULT_INJECTION: forcing a failure. [ 3153.653732] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.655345] CPU: 0 PID: 14557 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3153.656172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3153.657145] Call Trace: [ 3153.657460] dump_stack+0x107/0x167 [ 3153.657885] should_fail.cold+0x5/0xa [ 3153.658353] ? ext4_getfsmap_datadev+0x89d/0x25c0 [ 3153.658917] should_failslab+0x5/0x20 [ 3153.659360] kmem_cache_alloc_trace+0x55/0x320 [ 3153.659891] ? ext4_bg_num_gdb+0x172/0x250 [ 3153.660388] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3153.660944] ? lock_chain_count+0x20/0x20 [ 3153.661426] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.662024] ? do_swap+0x134/0x210 [ 3153.662444] ? sort_r+0x239/0x360 [ 3153.662846] ? ext4_file_open+0xa50/0xa50 [ 3153.663337] ext4_getfsmap+0x695/0x990 [ 3153.663785] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.664375] ? ext4_fsmap_to_internal+0x260/0x260 [ 3153.664942] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3153.665558] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.666153] ext4_ioc_getfsmap+0x2b0/0x620 [ 3153.666653] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3153.667189] ? find_held_lock+0x2c/0x110 [ 3153.667664] ? avc_has_extended_perms+0x675/0xf40 [ 3153.668245] ? lock_downgrade+0x6d0/0x6d0 [ 3153.668728] __ext4_ioctl+0x8ad/0x4220 [ 3153.669187] ? ext4_reset_inode_seed+0x450/0x450 [ 3153.669747] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3153.670361] ? find_held_lock+0x2c/0x110 [ 3153.670836] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3153.671494] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3153.672101] ? do_vfs_ioctl+0x283/0x10d0 [ 3153.672571] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3153.673180] ? generic_block_fiemap+0x60/0x60 [ 3153.673704] ? lock_downgrade+0x6d0/0x6d0 [ 3153.674179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3153.674756] ? wait_for_completion_io+0x270/0x270 [ 3153.675324] ? selinux_file_ioctl+0xb6/0x270 [ 3153.675834] ? __ext4_ioctl+0x4220/0x4220 [ 3153.676312] __x64_sys_ioctl+0x19a/0x210 [ 3153.676797] do_syscall_64+0x33/0x40 [ 3153.677237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3153.677836] RIP: 0033:0x7f7edf809b19 [ 3153.678286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3153.680427] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.681294] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3153.682110] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3153.682941] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.683753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.684563] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3153.694715] FAULT_INJECTION: forcing a failure. [ 3153.694715] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.696075] CPU: 0 PID: 14556 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3153.696877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3153.697851] Call Trace: [ 3153.698158] dump_stack+0x107/0x167 [ 3153.698595] should_fail.cold+0x5/0xa [ 3153.699042] ? create_object.isra.0+0x3a/0xa30 [ 3153.699575] should_failslab+0x5/0x20 [ 3153.700030] kmem_cache_alloc+0x5b/0x310 [ 3153.700512] create_object.isra.0+0x3a/0xa30 [ 3153.701021] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3153.701634] kmem_cache_alloc_trace+0x151/0x320 [ 3153.702188] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3153.702750] ? lock_chain_count+0x20/0x20 [ 3153.703245] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.703835] ? mark_lock+0xf5/0x2df0 [ 3153.704268] ? do_swap+0x134/0x210 [ 3153.704676] ? sort_r+0x239/0x360 [ 3153.705072] ? ext4_file_open+0xa50/0xa50 [ 3153.705562] ext4_getfsmap+0x695/0x990 [ 3153.706017] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.706618] ? ext4_fsmap_to_internal+0x260/0x260 [ 3153.707260] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3153.707886] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.708488] ext4_ioc_getfsmap+0x2b0/0x620 [ 3153.708975] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3153.709514] ? find_held_lock+0x2c/0x110 [ 3153.709987] ? avc_has_extended_perms+0x675/0xf40 [ 3153.710575] ? lock_downgrade+0x6d0/0x6d0 [ 3153.711052] __ext4_ioctl+0x8ad/0x4220 [ 3153.711509] ? ext4_reset_inode_seed+0x450/0x450 [ 3153.712069] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3153.712692] ? find_held_lock+0x2c/0x110 [ 3153.713169] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3153.713834] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3153.714442] ? do_vfs_ioctl+0x283/0x10d0 [ 3153.714920] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3153.715521] ? generic_block_fiemap+0x60/0x60 [ 3153.716057] ? lock_downgrade+0x6d0/0x6d0 [ 3153.716536] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3153.717100] ? wait_for_completion_io+0x270/0x270 [ 3153.717761] ? selinux_file_ioctl+0xb6/0x270 [ 3153.718279] ? __ext4_ioctl+0x4220/0x4220 [ 3153.718790] __x64_sys_ioctl+0x19a/0x210 [ 3153.719273] do_syscall_64+0x33/0x40 [ 3153.719709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3153.720309] RIP: 0033:0x7fb4d3c71b19 [ 3153.720748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3153.722894] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.723785] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3153.724610] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3153.725432] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.726266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.727091] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:39:59 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x114, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:39:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 59) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:39:59 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xbc) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/psched\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000900)=ANY=[]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 3153.758818] FAULT_INJECTION: forcing a failure. [ 3153.758818] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.760216] CPU: 0 PID: 14570 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3153.761024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3153.761987] Call Trace: [ 3153.762320] dump_stack+0x107/0x167 [ 3153.762747] should_fail.cold+0x5/0xa [ 3153.763193] ? create_object.isra.0+0x3a/0xa30 [ 3153.763720] should_failslab+0x5/0x20 [ 3153.764165] kmem_cache_alloc+0x5b/0x310 [ 3153.764641] create_object.isra.0+0x3a/0xa30 [ 3153.765149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3153.765737] kmem_cache_alloc_trace+0x151/0x320 [ 3153.766294] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3153.766847] ? lock_chain_count+0x20/0x20 [ 3153.767329] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.767943] ? do_swap+0x134/0x210 [ 3153.768366] ? sort_r+0x239/0x360 [ 3153.768764] ? ext4_file_open+0xa50/0xa50 [ 3153.769258] ext4_getfsmap+0x695/0x990 [ 3153.769705] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.770297] ? ext4_fsmap_to_internal+0x260/0x260 [ 3153.770858] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3153.771472] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3153.772068] ext4_ioc_getfsmap+0x2b0/0x620 [ 3153.772565] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3153.773103] ? find_held_lock+0x2c/0x110 [ 3153.773570] ? avc_has_extended_perms+0x675/0xf40 [ 3153.774144] ? lock_downgrade+0x6d0/0x6d0 [ 3153.774652] __ext4_ioctl+0x8ad/0x4220 [ 3153.775100] ? ext4_reset_inode_seed+0x450/0x450 [ 3153.775641] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3153.776241] ? find_held_lock+0x2c/0x110 [ 3153.776382] loop4: detected capacity change from 0 to 32768 [ 3153.776732] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3153.778634] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3153.779236] ? do_vfs_ioctl+0x283/0x10d0 [ 3153.779697] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3153.780298] ? generic_block_fiemap+0x60/0x60 [ 3153.780812] ? lock_downgrade+0x6d0/0x6d0 [ 3153.781288] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3153.781854] ? wait_for_completion_io+0x270/0x270 [ 3153.782419] ? selinux_file_ioctl+0xb6/0x270 [ 3153.782926] ? __ext4_ioctl+0x4220/0x4220 [ 3153.783399] __x64_sys_ioctl+0x19a/0x210 [ 3153.783875] do_syscall_64+0x33/0x40 [ 3153.784305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3153.784898] RIP: 0033:0x7fcaa5e39b19 [ 3153.785317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3153.785542] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3153.787426] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.787438] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3153.787444] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3153.787449] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.787455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.787461] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3153.894386] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:40:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 65) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:12 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x8ce02, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x2, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:40:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 60) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:12 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x22, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:40:12 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) pread64(r2, &(0x7f0000000400)=""/171, 0xab, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c005080080007ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb000000000000000000000d61b41033dce2f615a85c87d3d4dfe28cdaf051354d60e5a80259a1061d570fd46c7ebd63a3b645ac0f3fbaadc8864aab7b906"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) r4 = openat(r3, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000510c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xf, "8a7e3c59a411b6"}) 19:40:12 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x11e, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:40:12 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 54) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:12 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 89) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3167.237634] loop4: detected capacity change from 0 to 32768 [ 3167.249025] FAULT_INJECTION: forcing a failure. [ 3167.249025] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.249525] FAULT_INJECTION: forcing a failure. [ 3167.249525] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.250566] CPU: 1 PID: 14603 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3167.253787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3167.254838] Call Trace: [ 3167.255182] dump_stack+0x107/0x167 [ 3167.255643] should_fail.cold+0x5/0xa [ 3167.256127] ? create_object.isra.0+0x3a/0xa30 [ 3167.256702] should_failslab+0x5/0x20 [ 3167.257185] kmem_cache_alloc+0x5b/0x310 [ 3167.257704] create_object.isra.0+0x3a/0xa30 [ 3167.258258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3167.258964] kmem_cache_alloc_trace+0x151/0x320 [ 3167.259555] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3167.260151] ? lock_chain_count+0x20/0x20 [ 3167.260669] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.261311] ? do_swap+0x134/0x210 [ 3167.261758] ? sort_r+0x239/0x360 [ 3167.262190] ? ext4_file_open+0xa50/0xa50 [ 3167.262722] ext4_getfsmap+0x695/0x990 [ 3167.263211] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.263845] ? ext4_fsmap_to_internal+0x260/0x260 [ 3167.264449] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3167.265114] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.265763] ext4_ioc_getfsmap+0x2b0/0x620 [ 3167.266292] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3167.266873] ? find_held_lock+0x2c/0x110 [ 3167.267387] ? avc_has_extended_perms+0x675/0xf40 [ 3167.268012] ? lock_downgrade+0x6d0/0x6d0 [ 3167.268531] __ext4_ioctl+0x8ad/0x4220 [ 3167.269026] ? ext4_reset_inode_seed+0x450/0x450 [ 3167.269618] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3167.270273] ? find_held_lock+0x2c/0x110 [ 3167.270807] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3167.271530] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3167.272178] ? do_vfs_ioctl+0x283/0x10d0 [ 3167.272682] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3167.273340] ? generic_block_fiemap+0x60/0x60 [ 3167.273904] ? lock_downgrade+0x6d0/0x6d0 [ 3167.274441] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3167.275047] ? wait_for_completion_io+0x270/0x270 [ 3167.275660] ? selinux_file_ioctl+0xb6/0x270 [ 3167.276212] ? __ext4_ioctl+0x4220/0x4220 [ 3167.276736] __x64_sys_ioctl+0x19a/0x210 [ 3167.277247] do_syscall_64+0x33/0x40 [ 3167.277715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3167.278367] RIP: 0033:0x7f81caa8db19 [ 3167.278834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3167.281133] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.282076] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3167.282966] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3167.283856] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.284743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.285631] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3167.286545] CPU: 0 PID: 14588 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3167.288041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3167.288919] FAULT_INJECTION: forcing a failure. [ 3167.288919] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.289828] Call Trace: [ 3167.289850] dump_stack+0x107/0x167 [ 3167.289872] should_fail.cold+0x5/0xa [ 3167.289893] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3167.289911] should_failslab+0x5/0x20 [ 3167.295223] kmem_cache_alloc_trace+0x55/0x320 [ 3167.296218] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3167.297322] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3167.298338] ? lock_chain_count+0x20/0x20 [ 3167.299251] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.300346] ? do_swap+0x134/0x210 [ 3167.301114] ? sort_r+0x239/0x360 [ 3167.301856] ? ext4_file_open+0xa50/0xa50 [ 3167.302757] ext4_getfsmap+0x695/0x990 [ 3167.303591] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.304671] ? ext4_fsmap_to_internal+0x260/0x260 [ 3167.305701] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3167.306847] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.307947] ext4_ioc_getfsmap+0x2b0/0x620 [ 3167.308855] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3167.309830] ? find_held_lock+0x2c/0x110 [ 3167.310717] ? avc_has_extended_perms+0x675/0xf40 [ 3167.311786] ? lock_downgrade+0x6d0/0x6d0 [ 3167.312685] __ext4_ioctl+0x8ad/0x4220 [ 3167.313533] ? ext4_reset_inode_seed+0x450/0x450 [ 3167.314558] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3167.315672] ? find_held_lock+0x2c/0x110 [ 3167.316556] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3167.317767] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3167.318873] ? do_vfs_ioctl+0x283/0x10d0 [ 3167.319735] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3167.320850] ? generic_block_fiemap+0x60/0x60 [ 3167.321792] ? lock_downgrade+0x6d0/0x6d0 [ 3167.322678] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3167.323705] ? wait_for_completion_io+0x270/0x270 [ 3167.324741] ? selinux_file_ioctl+0xb6/0x270 [ 3167.325674] ? __ext4_ioctl+0x4220/0x4220 [ 3167.326559] __x64_sys_ioctl+0x19a/0x210 [ 3167.327433] do_syscall_64+0x33/0x40 [ 3167.328234] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3167.329312] RIP: 0033:0x7fcaa5e39b19 [ 3167.330106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3167.334002] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.335622] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3167.337144] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3167.338658] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.340168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.341664] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3167.343194] CPU: 1 PID: 14592 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3167.344046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3167.345044] Call Trace: [ 3167.345366] dump_stack+0x107/0x167 [ 3167.345804] should_fail.cold+0x5/0xa [ 3167.346262] ? create_object.isra.0+0x3a/0xa30 [ 3167.346821] should_failslab+0x5/0x20 [ 3167.347279] kmem_cache_alloc+0x5b/0x310 [ 3167.347818] create_object.isra.0+0x3a/0xa30 [ 3167.348408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3167.349061] kmem_cache_alloc_trace+0x151/0x320 [ 3167.349628] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3167.350197] ? lock_chain_count+0x20/0x20 [ 3167.350707] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.351323] ? do_swap+0x134/0x210 [ 3167.351759] ? sort_r+0x239/0x360 [ 3167.352180] ? ext4_file_open+0xa50/0xa50 [ 3167.352685] ext4_getfsmap+0x695/0x990 [ 3167.353154] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.353769] ? ext4_fsmap_to_internal+0x260/0x260 [ 3167.354351] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3167.354996] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.355620] ext4_ioc_getfsmap+0x2b0/0x620 [ 3167.356132] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3167.356680] ? find_held_lock+0x2c/0x110 [ 3167.357174] ? avc_has_extended_perms+0x675/0xf40 [ 3167.357772] ? lock_downgrade+0x6d0/0x6d0 [ 3167.358273] __ext4_ioctl+0x8ad/0x4220 [ 3167.358754] ? ext4_reset_inode_seed+0x450/0x450 [ 3167.359325] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3167.359953] ? find_held_lock+0x2c/0x110 [ 3167.360449] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3167.361137] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3167.361767] ? do_vfs_ioctl+0x283/0x10d0 [ 3167.362259] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3167.362893] ? generic_block_fiemap+0x60/0x60 [ 3167.363428] ? lock_downgrade+0x6d0/0x6d0 [ 3167.363921] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3167.364507] ? wait_for_completion_io+0x270/0x270 [ 3167.365092] ? selinux_file_ioctl+0xb6/0x270 [ 3167.365621] ? __ext4_ioctl+0x4220/0x4220 [ 3167.366116] __x64_sys_ioctl+0x19a/0x210 [ 3167.366614] do_syscall_64+0x33/0x40 [ 3167.367058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3167.367668] RIP: 0033:0x7f7edf809b19 [ 3167.368112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3167.370321] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.371242] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3167.372098] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3167.372950] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.373804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.374663] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3167.377893] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3167.381779] FAULT_INJECTION: forcing a failure. [ 3167.381779] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.383233] CPU: 1 PID: 14590 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3167.384070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3167.385065] Call Trace: [ 3167.385383] dump_stack+0x107/0x167 [ 3167.385822] should_fail.cold+0x5/0xa [ 3167.386282] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3167.386876] should_failslab+0x5/0x20 [ 3167.387334] kmem_cache_alloc_trace+0x55/0x320 [ 3167.387879] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3167.388490] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3167.389070] ? lock_chain_count+0x20/0x20 [ 3167.389572] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.390193] ? do_swap+0x134/0x210 [ 3167.390629] ? sort_r+0x239/0x360 [ 3167.391051] ? ext4_file_open+0xa50/0xa50 [ 3167.391555] ext4_getfsmap+0x695/0x990 [ 3167.392022] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.392630] ? ext4_fsmap_to_internal+0x260/0x260 [ 3167.393205] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3167.393834] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.394456] ext4_ioc_getfsmap+0x2b0/0x620 [ 3167.394963] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3167.395509] ? find_held_lock+0x2c/0x110 [ 3167.395998] ? avc_has_extended_perms+0x675/0xf40 [ 3167.396592] ? lock_downgrade+0x6d0/0x6d0 [ 3167.397089] __ext4_ioctl+0x8ad/0x4220 [ 3167.397558] ? ext4_reset_inode_seed+0x450/0x450 [ 3167.398123] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3167.398765] ? find_held_lock+0x2c/0x110 [ 3167.399254] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3167.399935] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3167.400549] ? do_vfs_ioctl+0x283/0x10d0 [ 3167.401031] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3167.401655] ? generic_block_fiemap+0x60/0x60 [ 3167.402188] ? lock_downgrade+0x6d0/0x6d0 [ 3167.402692] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3167.403264] ? wait_for_completion_io+0x270/0x270 [ 3167.403844] ? selinux_file_ioctl+0xb6/0x270 [ 3167.404367] ? __ext4_ioctl+0x4220/0x4220 [ 3167.404862] __x64_sys_ioctl+0x19a/0x210 [ 3167.405353] do_syscall_64+0x33/0x40 [ 3167.405796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3167.406413] RIP: 0033:0x7fb4d3c71b19 [ 3167.406856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3167.409040] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.409942] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3167.410804] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3167.411650] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.412491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.413337] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:40:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 61) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3167.478388] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3167.494590] FAULT_INJECTION: forcing a failure. [ 3167.494590] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.495942] CPU: 1 PID: 14613 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3167.496730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3167.497687] Call Trace: [ 3167.497992] dump_stack+0x107/0x167 [ 3167.498419] should_fail.cold+0x5/0xa [ 3167.498857] ? create_object.isra.0+0x3a/0xa30 [ 3167.499385] should_failslab+0x5/0x20 [ 3167.499823] kmem_cache_alloc+0x5b/0x310 [ 3167.500283] create_object.isra.0+0x3a/0xa30 [ 3167.500781] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3167.501365] kmem_cache_alloc_trace+0x151/0x320 [ 3167.501901] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3167.502455] ? lock_chain_count+0x20/0x20 [ 3167.502923] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.503507] ? do_swap+0x134/0x210 [ 3167.503913] ? sort_r+0x239/0x360 [ 3167.504304] ? ext4_file_open+0xa50/0xa50 [ 3167.504778] ext4_getfsmap+0x695/0x990 [ 3167.505222] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.505805] ? ext4_fsmap_to_internal+0x260/0x260 [ 3167.506366] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3167.506965] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.507554] ext4_ioc_getfsmap+0x2b0/0x620 [ 3167.508032] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3167.508551] ? find_held_lock+0x2c/0x110 [ 3167.509028] ? avc_has_extended_perms+0x675/0xf40 [ 3167.509592] ? lock_downgrade+0x6d0/0x6d0 [ 3167.510063] __ext4_ioctl+0x8ad/0x4220 [ 3167.510513] ? ext4_reset_inode_seed+0x450/0x450 [ 3167.511053] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3167.511648] ? find_held_lock+0x2c/0x110 [ 3167.512120] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3167.512773] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3167.513364] ? do_vfs_ioctl+0x283/0x10d0 [ 3167.513824] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3167.514431] ? generic_block_fiemap+0x60/0x60 [ 3167.514940] ? lock_downgrade+0x6d0/0x6d0 [ 3167.515415] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3167.515960] ? wait_for_completion_io+0x270/0x270 [ 3167.516511] ? selinux_file_ioctl+0xb6/0x270 [ 3167.517008] ? __ext4_ioctl+0x4220/0x4220 [ 3167.517486] __x64_sys_ioctl+0x19a/0x210 [ 3167.517951] do_syscall_64+0x33/0x40 [ 3167.518380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3167.518971] RIP: 0033:0x7fcaa5e39b19 [ 3167.519392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3167.521496] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.522374] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3167.523193] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3167.524003] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.524813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.525630] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:40:12 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c500f623", @ANYRES16=0x0, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:40:12 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x24, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:40:12 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000000000000000001000000000000020000000000000080000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea00000000000020000000000000000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b213fa7fb753000000000000000000000000007f5dc392176f0827ba346894b3eb9b8db7cf89e75b7770c57a7cdf82030a188b02bb7e8cc037a42d578d4df235a0d60dfba2d7d44b2ec33cf7dc6d5701dee6990b49421b"]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@random={'user.', 'vfat\x00'}, &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 3167.546011] loop4: detected capacity change from 0 to 32768 [ 3167.549118] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:40:12 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1bb, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:40:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 66) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 90) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:13 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 62) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:13 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 55) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3167.724838] FAULT_INJECTION: forcing a failure. [ 3167.724838] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.726383] CPU: 1 PID: 14638 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3167.727164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3167.728112] Call Trace: [ 3167.728421] dump_stack+0x107/0x167 [ 3167.728837] should_fail.cold+0x5/0xa [ 3167.729272] ? create_object.isra.0+0x3a/0xa30 [ 3167.729789] should_failslab+0x5/0x20 [ 3167.730222] kmem_cache_alloc+0x5b/0x310 [ 3167.730701] create_object.isra.0+0x3a/0xa30 [ 3167.731201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3167.731789] kmem_cache_alloc_trace+0x151/0x320 [ 3167.732326] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3167.732874] ? lock_chain_count+0x20/0x20 [ 3167.733347] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.733934] ? do_swap+0x134/0x210 [ 3167.734341] ? sort_r+0x239/0x360 [ 3167.734744] ? ext4_file_open+0xa50/0xa50 [ 3167.735225] ext4_getfsmap+0x695/0x990 [ 3167.735668] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.736242] ? ext4_fsmap_to_internal+0x260/0x260 [ 3167.736789] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3167.737389] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.737983] ext4_ioc_getfsmap+0x2b0/0x620 [ 3167.738470] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3167.738990] ? find_held_lock+0x2c/0x110 [ 3167.739458] ? avc_has_extended_perms+0x675/0xf40 [ 3167.740030] ? lock_downgrade+0x6d0/0x6d0 [ 3167.740503] __ext4_ioctl+0x8ad/0x4220 [ 3167.740950] ? ext4_reset_inode_seed+0x450/0x450 [ 3167.741491] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3167.742087] ? find_held_lock+0x2c/0x110 [ 3167.742567] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3167.743225] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3167.743812] ? do_vfs_ioctl+0x283/0x10d0 [ 3167.744272] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3167.744870] ? generic_block_fiemap+0x60/0x60 [ 3167.745378] ? lock_downgrade+0x6d0/0x6d0 [ 3167.745852] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3167.746410] ? wait_for_completion_io+0x270/0x270 [ 3167.746962] ? selinux_file_ioctl+0xb6/0x270 [ 3167.747461] ? __ext4_ioctl+0x4220/0x4220 [ 3167.747936] __x64_sys_ioctl+0x19a/0x210 [ 3167.748401] do_syscall_64+0x33/0x40 [ 3167.748821] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3167.749402] RIP: 0033:0x7fb4d3c71b19 [ 3167.749831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3167.751930] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.752797] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3167.753608] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3167.754434] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.755252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.756065] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3167.763689] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:40:13 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x48, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:40:13 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074485006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca0000000500df5ffee4000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x71, 0x5, 0x5) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3167.792965] FAULT_INJECTION: forcing a failure. [ 3167.792965] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.795622] CPU: 0 PID: 14642 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3167.797184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3167.799059] Call Trace: [ 3167.799657] dump_stack+0x107/0x167 [ 3167.800476] should_fail.cold+0x5/0xa [ 3167.801337] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3167.802447] should_failslab+0x5/0x20 [ 3167.803304] kmem_cache_alloc_trace+0x55/0x320 [ 3167.804331] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3167.805469] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3167.806560] ? lock_chain_count+0x20/0x20 [ 3167.807490] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.808638] ? do_swap+0x134/0x210 [ 3167.809438] ? sort_r+0x239/0x360 [ 3167.810215] ? ext4_file_open+0xa50/0xa50 [ 3167.811155] ext4_getfsmap+0x695/0x990 [ 3167.812029] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.813168] ? ext4_fsmap_to_internal+0x260/0x260 [ 3167.814254] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3167.815444] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.816609] ext4_ioc_getfsmap+0x2b0/0x620 [ 3167.817558] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3167.818589] ? find_held_lock+0x2c/0x110 [ 3167.819511] ? avc_has_extended_perms+0x675/0xf40 [ 3167.820636] ? lock_downgrade+0x6d0/0x6d0 [ 3167.821572] __ext4_ioctl+0x8ad/0x4220 [ 3167.822454] ? ext4_reset_inode_seed+0x450/0x450 [ 3167.823558] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3167.824739] ? find_held_lock+0x2c/0x110 [ 3167.825664] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3167.826966] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3167.828128] ? do_vfs_ioctl+0x283/0x10d0 [ 3167.829040] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3167.830217] ? generic_block_fiemap+0x60/0x60 [ 3167.831228] ? lock_downgrade+0x6d0/0x6d0 [ 3167.832155] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3167.833232] ? wait_for_completion_io+0x270/0x270 [ 3167.834314] ? selinux_file_ioctl+0xb6/0x270 [ 3167.835309] ? __ext4_ioctl+0x4220/0x4220 [ 3167.836229] __x64_sys_ioctl+0x19a/0x210 [ 3167.837152] do_syscall_64+0x33/0x40 [ 3167.837988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3167.839142] RIP: 0033:0x7f7edf809b19 [ 3167.839980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3167.844121] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.845820] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3167.847434] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3167.849033] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.850649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.852246] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3167.853777] FAULT_INJECTION: forcing a failure. [ 3167.853777] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.855249] CPU: 1 PID: 14641 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3167.856054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3167.856996] Call Trace: [ 3167.857299] dump_stack+0x107/0x167 [ 3167.857717] should_fail.cold+0x5/0xa [ 3167.858148] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3167.858706] should_failslab+0x5/0x20 [ 3167.859144] kmem_cache_alloc_trace+0x55/0x320 [ 3167.859668] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3167.860257] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3167.860792] ? lock_chain_count+0x20/0x20 [ 3167.861269] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.861851] ? do_swap+0x134/0x210 [ 3167.862255] ? sort_r+0x239/0x360 [ 3167.862657] ? ext4_file_open+0xa50/0xa50 [ 3167.863131] ext4_getfsmap+0x695/0x990 [ 3167.863572] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.864148] ? ext4_fsmap_to_internal+0x260/0x260 [ 3167.864694] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3167.865304] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.865905] ext4_ioc_getfsmap+0x2b0/0x620 [ 3167.866395] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3167.866913] ? find_held_lock+0x2c/0x110 [ 3167.867379] ? avc_has_extended_perms+0x675/0xf40 [ 3167.867945] ? lock_downgrade+0x6d0/0x6d0 [ 3167.868416] __ext4_ioctl+0x8ad/0x4220 [ 3167.868867] ? ext4_reset_inode_seed+0x450/0x450 [ 3167.869404] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3167.870004] ? find_held_lock+0x2c/0x110 [ 3167.870476] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3167.871131] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3167.871718] ? do_vfs_ioctl+0x283/0x10d0 [ 3167.872178] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3167.872778] ? generic_block_fiemap+0x60/0x60 [ 3167.873285] ? lock_downgrade+0x6d0/0x6d0 [ 3167.873757] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3167.874303] ? wait_for_completion_io+0x270/0x270 [ 3167.874867] ? selinux_file_ioctl+0xb6/0x270 [ 3167.875367] ? __ext4_ioctl+0x4220/0x4220 [ 3167.875836] __x64_sys_ioctl+0x19a/0x210 [ 3167.876299] do_syscall_64+0x33/0x40 [ 3167.876723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3167.877308] RIP: 0033:0x7f81caa8db19 [ 3167.877732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3167.879830] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.880693] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3167.881512] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3167.882321] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.883139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.883952] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3167.898550] FAULT_INJECTION: forcing a failure. [ 3167.898550] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.899971] CPU: 1 PID: 14644 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3167.900772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3167.901714] Call Trace: [ 3167.902015] dump_stack+0x107/0x167 [ 3167.902437] should_fail.cold+0x5/0xa [ 3167.902872] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3167.903424] should_failslab+0x5/0x20 [ 3167.903857] kmem_cache_alloc_trace+0x55/0x320 [ 3167.904374] ? ext4_bg_num_gdb+0x172/0x250 [ 3167.904858] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3167.905393] ? lock_chain_count+0x20/0x20 [ 3167.905863] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.906450] ? do_swap+0x134/0x210 [ 3167.906858] ? sort_r+0x239/0x360 [ 3167.907251] ? ext4_file_open+0xa50/0xa50 [ 3167.907725] ext4_getfsmap+0x695/0x990 [ 3167.908167] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.908749] ? ext4_fsmap_to_internal+0x260/0x260 [ 3167.909298] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3167.909901] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3167.910505] ext4_ioc_getfsmap+0x2b0/0x620 [ 3167.910986] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3167.911503] ? find_held_lock+0x2c/0x110 [ 3167.911967] ? avc_has_extended_perms+0x675/0xf40 [ 3167.912538] ? lock_downgrade+0x6d0/0x6d0 [ 3167.913011] __ext4_ioctl+0x8ad/0x4220 [ 3167.913458] ? ext4_reset_inode_seed+0x450/0x450 [ 3167.913995] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3167.914592] ? find_held_lock+0x2c/0x110 [ 3167.915058] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3167.915715] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3167.916302] ? do_vfs_ioctl+0x283/0x10d0 [ 3167.916760] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3167.917361] ? generic_block_fiemap+0x60/0x60 [ 3167.917866] ? lock_downgrade+0x6d0/0x6d0 [ 3167.918336] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3167.918890] ? wait_for_completion_io+0x270/0x270 [ 3167.919437] ? selinux_file_ioctl+0xb6/0x270 [ 3167.919941] ? __ext4_ioctl+0x4220/0x4220 [ 3167.920410] __x64_sys_ioctl+0x19a/0x210 [ 3167.920871] do_syscall_64+0x33/0x40 [ 3167.921294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3167.921877] RIP: 0033:0x7fcaa5e39b19 [ 3167.922300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3167.924391] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.925259] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3167.926065] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3167.926885] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.927695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.928504] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:40:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 63) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:28 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xb91, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:40:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 67) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 91) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:28 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x80000, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES32]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x2, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:40:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 56) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:28 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:40:28 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1ffa2b57b4ffc557dde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f00"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3183.084420] loop4: detected capacity change from 0 to 32768 [ 3183.085613] FAULT_INJECTION: forcing a failure. [ 3183.085613] name failslab, interval 1, probability 0, space 0, times 0 [ 3183.087311] CPU: 0 PID: 14674 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3183.088138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3183.089131] Call Trace: [ 3183.089448] dump_stack+0x107/0x167 [ 3183.089888] should_fail.cold+0x5/0xa [ 3183.090356] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3183.090950] should_failslab+0x5/0x20 [ 3183.091420] kmem_cache_alloc_trace+0x55/0x320 [ 3183.091984] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3183.092615] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3183.093183] ? lock_chain_count+0x20/0x20 [ 3183.093688] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.094303] ? do_swap+0x134/0x210 [ 3183.094742] ? sort_r+0x239/0x360 [ 3183.095169] ? ext4_file_open+0xa50/0xa50 [ 3183.095670] ext4_getfsmap+0x695/0x990 [ 3183.096148] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.096777] ? ext4_fsmap_to_internal+0x260/0x260 [ 3183.097372] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3183.098008] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.098629] ext4_ioc_getfsmap+0x2b0/0x620 [ 3183.099148] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3183.099698] ? find_held_lock+0x2c/0x110 [ 3183.100195] ? avc_has_extended_perms+0x675/0xf40 [ 3183.100788] ? lock_downgrade+0x6d0/0x6d0 [ 3183.101281] __ext4_ioctl+0x8ad/0x4220 [ 3183.101750] ? ext4_reset_inode_seed+0x450/0x450 [ 3183.102313] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3183.102958] ? find_held_lock+0x2c/0x110 [ 3183.103448] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3183.104129] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3183.104755] ? do_vfs_ioctl+0x283/0x10d0 [ 3183.105232] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3183.105854] ? generic_block_fiemap+0x60/0x60 [ 3183.106385] ? lock_downgrade+0x6d0/0x6d0 [ 3183.106884] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3183.107456] ? wait_for_completion_io+0x270/0x270 [ 3183.108035] ? selinux_file_ioctl+0xb6/0x270 [ 3183.108558] ? __ext4_ioctl+0x4220/0x4220 [ 3183.109053] __x64_sys_ioctl+0x19a/0x210 [ 3183.109539] do_syscall_64+0x33/0x40 [ 3183.109991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3183.110604] RIP: 0033:0x7fb4d3c71b19 [ 3183.111062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3183.113238] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3183.114129] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3183.114978] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3183.115814] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3183.116644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3183.117480] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3183.136592] FAULT_INJECTION: forcing a failure. [ 3183.136592] name failslab, interval 1, probability 0, space 0, times 0 [ 3183.137960] CPU: 0 PID: 14662 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3183.138777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3183.139760] Call Trace: [ 3183.140077] dump_stack+0x107/0x167 [ 3183.140501] should_fail.cold+0x5/0xa [ 3183.140819] FAULT_INJECTION: forcing a failure. [ 3183.140819] name failslab, interval 1, probability 0, space 0, times 0 [ 3183.140968] ? create_object.isra.0+0x3a/0xa30 [ 3183.144097] should_failslab+0x5/0x20 [ 3183.144542] kmem_cache_alloc+0x5b/0x310 [ 3183.145017] create_object.isra.0+0x3a/0xa30 [ 3183.145527] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3183.146137] kmem_cache_alloc_trace+0x151/0x320 [ 3183.146697] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3183.147251] ? lock_chain_count+0x20/0x20 [ 3183.147741] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.148337] ? do_swap+0x134/0x210 [ 3183.148765] ? sort_r+0x239/0x360 [ 3183.149166] ? ext4_file_open+0xa50/0xa50 [ 3183.149656] ext4_getfsmap+0x695/0x990 [ 3183.150106] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.150715] ? ext4_fsmap_to_internal+0x260/0x260 [ 3183.151276] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3183.151897] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.152500] ext4_ioc_getfsmap+0x2b0/0x620 [ 3183.152991] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3183.153526] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3183.154153] ? trace_hardirqs_on+0x5b/0x180 [ 3183.154672] ? __sanitizer_cov_trace_const_cmp4+0x4/0x20 [ 3183.155307] ? mark_lock+0xf5/0x2df0 [ 3183.155733] ? lock_downgrade+0x6d0/0x6d0 [ 3183.156211] __ext4_ioctl+0x8ad/0x4220 [ 3183.156661] ? ext4_reset_inode_seed+0x450/0x450 [ 3183.157204] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3183.157824] ? find_held_lock+0x2c/0x110 [ 3183.158298] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3183.158969] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3183.159557] ? do_vfs_ioctl+0x283/0x10d0 [ 3183.160025] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3183.160628] ? generic_block_fiemap+0x60/0x60 [ 3183.161147] ? lock_downgrade+0x6d0/0x6d0 [ 3183.161636] ? selinux_file_ioctl+0xb6/0x270 [ 3183.162151] ? __ext4_ioctl+0x4220/0x4220 [ 3183.162638] __x64_sys_ioctl+0x19a/0x210 [ 3183.163109] do_syscall_64+0x33/0x40 [ 3183.163540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3183.164135] RIP: 0033:0x7f81caa8db19 [ 3183.164563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3183.166727] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3183.167595] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3183.168409] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3183.169225] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3183.170039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3183.170865] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3183.171701] CPU: 1 PID: 14664 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3183.173270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3183.173280] FAULT_INJECTION: forcing a failure. [ 3183.173280] name failslab, interval 1, probability 0, space 0, times 0 [ 3183.175161] Call Trace: [ 3183.175184] dump_stack+0x107/0x167 [ 3183.175207] should_fail.cold+0x5/0xa [ 3183.178685] ? create_object.isra.0+0x3a/0xa30 [ 3183.179716] should_failslab+0x5/0x20 [ 3183.180581] kmem_cache_alloc+0x5b/0x310 [ 3183.181500] create_object.isra.0+0x3a/0xa30 [ 3183.182488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3183.183666] kmem_cache_alloc_trace+0x151/0x320 [ 3183.184721] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3183.185804] ? lock_chain_count+0x20/0x20 [ 3183.186740] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.187885] ? do_swap+0x134/0x210 [ 3183.188687] ? sort_r+0x239/0x360 [ 3183.189465] ? ext4_file_open+0xa50/0xa50 [ 3183.190394] ext4_getfsmap+0x695/0x990 [ 3183.191270] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.192445] ? ext4_fsmap_to_internal+0x260/0x260 [ 3183.193516] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3183.194743] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.195907] ext4_ioc_getfsmap+0x2b0/0x620 [ 3183.196852] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3183.197900] ? find_held_lock+0x2c/0x110 [ 3183.198856] ? avc_has_extended_perms+0x675/0xf40 [ 3183.199990] ? lock_downgrade+0x6d0/0x6d0 [ 3183.200925] __ext4_ioctl+0x8ad/0x4220 [ 3183.201807] ? ext4_reset_inode_seed+0x450/0x450 [ 3183.202876] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3183.204049] ? find_held_lock+0x2c/0x110 [ 3183.204978] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3183.206266] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3183.207427] ? do_vfs_ioctl+0x283/0x10d0 [ 3183.208363] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3183.209535] ? generic_block_fiemap+0x60/0x60 [ 3183.210554] ? lock_downgrade+0x6d0/0x6d0 [ 3183.211514] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3183.212623] ? wait_for_completion_io+0x270/0x270 [ 3183.213724] ? selinux_file_ioctl+0xb6/0x270 [ 3183.214742] ? __ext4_ioctl+0x4220/0x4220 [ 3183.215690] __x64_sys_ioctl+0x19a/0x210 [ 3183.216611] do_syscall_64+0x33/0x40 [ 3183.217449] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3183.218608] RIP: 0033:0x7f7edf809b19 [ 3183.219477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3183.223727] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3183.225465] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3183.227117] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3183.228757] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3183.230399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3183.232054] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3183.233696] CPU: 0 PID: 14660 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3183.234493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3183.235432] Call Trace: [ 3183.235731] dump_stack+0x107/0x167 [ 3183.236141] should_fail.cold+0x5/0xa [ 3183.236569] ? create_object.isra.0+0x3a/0xa30 [ 3183.237082] should_failslab+0x5/0x20 [ 3183.237510] kmem_cache_alloc+0x5b/0x310 [ 3183.237967] ? lock_downgrade+0x6d0/0x6d0 [ 3183.238445] create_object.isra.0+0x3a/0xa30 [ 3183.238948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3183.239519] kmem_cache_alloc_trace+0x151/0x320 [ 3183.240047] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3183.240590] ? lock_chain_count+0x20/0x20 [ 3183.241072] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.241661] ? do_swap+0x134/0x210 [ 3183.242071] ? sort_r+0x239/0x360 [ 3183.242469] ? ext4_file_open+0xa50/0xa50 [ 3183.242958] ext4_getfsmap+0x695/0x990 [ 3183.243405] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.243991] ? ext4_fsmap_to_internal+0x260/0x260 [ 3183.244550] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3183.245145] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.245731] ext4_ioc_getfsmap+0x2b0/0x620 [ 3183.246206] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3183.246744] ? find_held_lock+0x2c/0x110 [ 3183.247221] ? avc_has_extended_perms+0x675/0xf40 [ 3183.247787] ? lock_downgrade+0x6d0/0x6d0 [ 3183.248265] __ext4_ioctl+0x8ad/0x4220 [ 3183.248381] loop4: detected capacity change from 0 to 32768 [ 3183.248720] ? ext4_reset_inode_seed+0x450/0x450 [ 3183.250566] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3183.251165] ? find_held_lock+0x2c/0x110 [ 3183.251648] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3183.252310] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3183.252896] ? do_vfs_ioctl+0x283/0x10d0 [ 3183.253356] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3183.253953] ? generic_block_fiemap+0x60/0x60 [ 3183.254464] ? lock_downgrade+0x6d0/0x6d0 [ 3183.254945] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3183.255494] ? wait_for_completion_io+0x270/0x270 [ 3183.256053] ? selinux_file_ioctl+0xb6/0x270 [ 3183.256552] ? __ext4_ioctl+0x4220/0x4220 [ 3183.257026] __x64_sys_ioctl+0x19a/0x210 [ 3183.257490] do_syscall_64+0x33/0x40 [ 3183.257915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3183.258497] RIP: 0033:0x7fcaa5e39b19 [ 3183.258928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3183.260995] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3183.261869] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3183.262701] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3183.263511] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3183.264327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3183.265136] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:40:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 57) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:28 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x2, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x3, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 3183.317674] FAULT_INJECTION: forcing a failure. [ 3183.317674] name failslab, interval 1, probability 0, space 0, times 0 [ 3183.319047] CPU: 0 PID: 14691 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3183.319841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3183.320816] Call Trace: [ 3183.321135] dump_stack+0x107/0x167 [ 3183.321570] should_fail.cold+0x5/0xa [ 3183.322016] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3183.322580] should_failslab+0x5/0x20 [ 3183.323019] kmem_cache_alloc_trace+0x55/0x320 [ 3183.323536] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3183.324112] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3183.324644] ? lock_chain_count+0x20/0x20 [ 3183.325115] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.325694] ? do_swap+0x134/0x210 [ 3183.326110] ? sort_r+0x239/0x360 [ 3183.326512] ? ext4_file_open+0xa50/0xa50 [ 3183.327005] ext4_getfsmap+0x695/0x990 [ 3183.327452] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.328034] ? ext4_fsmap_to_internal+0x260/0x260 [ 3183.328590] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3183.329197] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.329786] ext4_ioc_getfsmap+0x2b0/0x620 [ 3183.330264] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3183.330792] ? find_held_lock+0x2c/0x110 [ 3183.331267] ? avc_has_extended_perms+0x675/0xf40 [ 3183.331843] ? lock_downgrade+0x6d0/0x6d0 [ 3183.332326] __ext4_ioctl+0x8ad/0x4220 [ 3183.332794] ? ext4_reset_inode_seed+0x450/0x450 [ 3183.333342] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3183.333948] ? find_held_lock+0x2c/0x110 [ 3183.334425] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3183.335092] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3183.335697] ? do_vfs_ioctl+0x283/0x10d0 [ 3183.336170] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3183.336802] ? generic_block_fiemap+0x60/0x60 [ 3183.337309] ? lock_downgrade+0x6d0/0x6d0 [ 3183.337786] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3183.338346] ? wait_for_completion_io+0x270/0x270 [ 3183.338909] ? selinux_file_ioctl+0xb6/0x270 [ 3183.339422] ? __ext4_ioctl+0x4220/0x4220 [ 3183.339894] __x64_sys_ioctl+0x19a/0x210 [ 3183.340364] do_syscall_64+0x33/0x40 [ 3183.340798] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3183.341383] RIP: 0033:0x7fb4d3c71b19 [ 3183.341814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3183.343939] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3183.344799] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3183.345610] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3183.346440] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3183.347282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3183.348098] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:40:28 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x68, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:40:28 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r1, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r1, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:40:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 92) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:28 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x910b, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3183.421748] loop4: detected capacity change from 0 to 32768 [ 3183.423475] FAULT_INJECTION: forcing a failure. [ 3183.423475] name failslab, interval 1, probability 0, space 0, times 0 [ 3183.426396] CPU: 1 PID: 14701 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3183.427976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3183.429871] Call Trace: [ 3183.430480] dump_stack+0x107/0x167 [ 3183.431333] should_fail.cold+0x5/0xa [ 3183.432212] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3183.433306] should_failslab+0x5/0x20 [ 3183.434160] kmem_cache_alloc_trace+0x55/0x320 [ 3183.435205] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3183.436340] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3183.437391] ? lock_chain_count+0x20/0x20 [ 3183.438305] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.439451] ? do_swap+0x134/0x210 [ 3183.440264] ? sort_r+0x239/0x360 [ 3183.441040] ? ext4_file_open+0xa50/0xa50 [ 3183.441972] ext4_getfsmap+0x695/0x990 [ 3183.442856] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.444005] ? ext4_fsmap_to_internal+0x260/0x260 [ 3183.445099] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3183.446289] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3183.447459] ext4_ioc_getfsmap+0x2b0/0x620 [ 3183.448409] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3183.449428] ? find_held_lock+0x2c/0x110 [ 3183.450334] ? avc_has_extended_perms+0x675/0xf40 [ 3183.451455] ? lock_downgrade+0x6d0/0x6d0 [ 3183.452397] __ext4_ioctl+0x8ad/0x4220 [ 3183.453287] ? ext4_reset_inode_seed+0x450/0x450 [ 3183.454340] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3183.455527] ? find_held_lock+0x2c/0x110 [ 3183.456454] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3183.457742] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3183.458908] ? do_vfs_ioctl+0x283/0x10d0 [ 3183.459819] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3183.460982] ? generic_block_fiemap+0x60/0x60 [ 3183.461980] ? lock_downgrade+0x6d0/0x6d0 [ 3183.462919] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3183.463988] ? wait_for_completion_io+0x270/0x270 [ 3183.465080] ? selinux_file_ioctl+0xb6/0x270 [ 3183.466077] ? __ext4_ioctl+0x4220/0x4220 [ 3183.467019] __x64_sys_ioctl+0x19a/0x210 [ 3183.467935] do_syscall_64+0x33/0x40 [ 3183.468772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3183.469922] RIP: 0033:0x7f7edf809b19 [ 3183.470764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3183.474913] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3183.476612] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3183.478210] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3183.479815] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3183.481406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3183.483014] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3183.488869] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:40:28 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:40:28 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000400)={0x36b, 0x71d5, 0x3, 0x7, 0x454a}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000200000004000000ffff34040100001108000000ff070000"], 0x880) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3183.679307] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3199.771682] FAULT_INJECTION: forcing a failure. [ 3199.771682] name failslab, interval 1, probability 0, space 0, times 0 [ 3199.773325] CPU: 1 PID: 14739 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3199.774103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3199.775053] Call Trace: [ 3199.775356] dump_stack+0x107/0x167 [ 3199.775773] should_fail.cold+0x5/0xa [ 3199.776208] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3199.776751] should_failslab+0x5/0x20 [ 3199.777184] kmem_cache_alloc_trace+0x55/0x320 [ 3199.777702] ? ext4_get_group_desc+0x2a0/0x560 [ 3199.778227] ext4_getfsmap_datadev+0x719/0x25c0 [ 3199.778771] ? lock_chain_count+0x20/0x20 [ 3199.779236] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.779812] ? do_swap+0x134/0x210 [ 3199.780216] ? sort_r+0x239/0x360 [ 3199.780607] ? ext4_file_open+0xa50/0xa50 [ 3199.781077] ext4_getfsmap+0x695/0x990 [ 3199.781516] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.782089] ? ext4_fsmap_to_internal+0x260/0x260 [ 3199.782634] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3199.783236] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.783815] ext4_ioc_getfsmap+0x2b0/0x620 [ 3199.784296] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3199.784808] ? find_held_lock+0x2c/0x110 [ 3199.785272] ? avc_has_extended_perms+0x675/0xf40 [ 3199.785851] ? lock_downgrade+0x6d0/0x6d0 [ 3199.786318] __ext4_ioctl+0x8ad/0x4220 [ 3199.786797] ? ext4_reset_inode_seed+0x450/0x450 [ 3199.787353] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3199.787962] ? find_held_lock+0x2c/0x110 [ 3199.788429] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3199.789079] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3199.789662] ? do_vfs_ioctl+0x283/0x10d0 [ 3199.790116] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3199.790708] ? generic_block_fiemap+0x60/0x60 [ 3199.791209] ? lock_downgrade+0x6d0/0x6d0 [ 3199.791675] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3199.792217] ? wait_for_completion_io+0x270/0x270 [ 3199.792763] ? selinux_file_ioctl+0xb6/0x270 19:40:45 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x162210, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:40:45 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) r3 = inotify_init() ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000001c0)) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:40:45 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0xfffffffffffffffd}, {0x0, 0x0, 0x4000}, {&(0x7f0000000480)="a4e738933209e08308cf157a68fa0788ddc3159cc02639a4bf601062d2475bad8a44f67dcb736ac83ad3a565250cb59fe58e70a65900c0071e3a2f59726916349e14db06ecd4d36ecb5001588f6b40ac80846c95f51e4ee56491928ee54ad9d1a5b2", 0x62}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES64, @ANYRESDEC]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000030000000000000010008000000000000000000000874c4e00000000000000000000000000000000000000000000000000000000000000000000002d0316ccc51ddb0d2938cc6c79643f0900000800000005000000000000000001000000000000020000000000000080000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea000000000000200000000000000001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0f232dcbd48075a0000e6ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000100"/384]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:40:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 68) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:40:45 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x74, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3199.793259] ? __ext4_ioctl+0x4220/0x4220 [ 3199.793925] __x64_sys_ioctl+0x19a/0x210 [ 3199.794392] do_syscall_64+0x33/0x40 [ 3199.794828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3199.795436] RIP: 0033:0x7f81caa8db19 19:40:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 93) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3199.795855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3199.798067] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3199.798943] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3199.799780] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3199.800617] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3199.801454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3199.802259] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3199.815543] FAULT_INJECTION: forcing a failure. [ 3199.815543] name failslab, interval 1, probability 0, space 0, times 0 [ 3199.816100] loop4: detected capacity change from 0 to 8388096 [ 3199.816907] CPU: 1 PID: 14746 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3199.818873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3199.819811] Call Trace: [ 3199.820109] dump_stack+0x107/0x167 [ 3199.820520] should_fail.cold+0x5/0xa [ 3199.820949] ? create_object.isra.0+0x3a/0xa30 [ 3199.821461] should_failslab+0x5/0x20 [ 3199.821889] kmem_cache_alloc+0x5b/0x310 [ 3199.821920] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 3199.822349] create_object.isra.0+0x3a/0xa30 [ 3199.822359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3199.822372] kmem_cache_alloc_trace+0x151/0x320 [ 3199.822390] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3199.826422] ? lock_chain_count+0x20/0x20 [ 3199.826901] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.827475] ? do_swap+0x134/0x210 [ 3199.827874] ? sort_r+0x239/0x360 [ 3199.828263] ? ext4_file_open+0xa50/0xa50 [ 3199.828732] ext4_getfsmap+0x695/0x990 [ 3199.829168] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.829742] ? ext4_fsmap_to_internal+0x260/0x260 [ 3199.830283] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3199.830884] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.831466] ext4_ioc_getfsmap+0x2b0/0x620 [ 3199.831939] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3199.832455] ? find_held_lock+0x2c/0x110 [ 3199.832917] ? avc_has_extended_perms+0x675/0xf40 [ 3199.833480] ? lock_downgrade+0x6d0/0x6d0 [ 3199.833948] __ext4_ioctl+0x8ad/0x4220 [ 3199.834394] ? ext4_reset_inode_seed+0x450/0x450 [ 3199.834938] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3199.835528] ? find_held_lock+0x2c/0x110 [ 3199.835995] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 19:40:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 58) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3199.836643] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3199.837421] ? do_vfs_ioctl+0x283/0x10d0 [ 3199.837885] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3199.838483] ? generic_block_fiemap+0x60/0x60 [ 3199.838999] ? lock_downgrade+0x6d0/0x6d0 [ 3199.839468] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3199.840009] ? wait_for_completion_io+0x270/0x270 [ 3199.840559] ? selinux_file_ioctl+0xb6/0x270 [ 3199.841058] ? __ext4_ioctl+0x4220/0x4220 [ 3199.841533] __x64_sys_ioctl+0x19a/0x210 [ 3199.841999] do_syscall_64+0x33/0x40 [ 3199.842423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3199.843008] RIP: 0033:0x7f7edf809b19 [ 3199.843430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3199.845515] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3199.846376] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3199.847192] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3199.847996] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3199.848803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3199.849607] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3199.852493] FAULT_INJECTION: forcing a failure. [ 3199.852493] name failslab, interval 1, probability 0, space 0, times 0 [ 3199.855338] CPU: 0 PID: 14736 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3199.855489] FAULT_INJECTION: forcing a failure. [ 3199.855489] name failslab, interval 1, probability 0, space 0, times 0 [ 3199.856793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3199.856801] Call Trace: [ 3199.856828] dump_stack+0x107/0x167 [ 3199.856849] should_fail.cold+0x5/0xa [ 3199.856872] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3199.856894] should_failslab+0x5/0x20 [ 3199.863661] kmem_cache_alloc_trace+0x55/0x320 [ 3199.864609] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3199.865667] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3199.866662] ? lock_chain_count+0x20/0x20 [ 3199.867543] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.868630] ? do_swap+0x134/0x210 [ 3199.869376] ? sort_r+0x239/0x360 [ 3199.870097] ? ext4_file_open+0xa50/0xa50 [ 3199.870984] ext4_getfsmap+0x695/0x990 [ 3199.871797] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.872860] ? ext4_fsmap_to_internal+0x260/0x260 [ 3199.873867] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3199.874978] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.876054] ext4_ioc_getfsmap+0x2b0/0x620 [ 3199.876940] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3199.877890] ? find_held_lock+0x2c/0x110 [ 3199.878759] ? avc_has_extended_perms+0x675/0xf40 [ 3199.879801] ? lock_downgrade+0x6d0/0x6d0 [ 3199.880672] __ext4_ioctl+0x8ad/0x4220 [ 3199.881491] ? ext4_reset_inode_seed+0x450/0x450 [ 3199.882480] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3199.883585] ? find_held_lock+0x2c/0x110 [ 3199.884452] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3199.885654] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3199.886738] ? do_vfs_ioctl+0x283/0x10d0 [ 3199.887656] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3199.888766] ? generic_block_fiemap+0x60/0x60 [ 3199.889697] ? lock_downgrade+0x6d0/0x6d0 [ 3199.890556] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3199.891571] ? wait_for_completion_io+0x270/0x270 [ 3199.892582] ? selinux_file_ioctl+0xb6/0x270 [ 3199.893499] ? __ext4_ioctl+0x4220/0x4220 [ 3199.894367] __x64_sys_ioctl+0x19a/0x210 [ 3199.895228] do_syscall_64+0x33/0x40 [ 3199.896005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3199.897070] RIP: 0033:0x7fcaa5e39b19 [ 3199.897846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3199.901695] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3199.903311] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3199.904791] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3199.906273] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3199.907761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3199.909246] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3199.910752] CPU: 1 PID: 14749 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3199.911542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3199.912464] Call Trace: [ 3199.912757] dump_stack+0x107/0x167 [ 3199.913165] should_fail.cold+0x5/0xa [ 3199.913589] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3199.914124] should_failslab+0x5/0x20 [ 3199.914549] kmem_cache_alloc_trace+0x55/0x320 [ 3199.915067] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3199.915638] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3199.916168] ? lock_chain_count+0x20/0x20 [ 3199.916634] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.917206] ? do_swap+0x134/0x210 [ 3199.917608] ? sort_r+0x239/0x360 [ 3199.917995] ? ext4_file_open+0xa50/0xa50 [ 3199.918462] ext4_getfsmap+0x695/0x990 [ 3199.918909] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.919481] ? ext4_fsmap_to_internal+0x260/0x260 [ 3199.920021] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3199.920617] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3199.921197] ext4_ioc_getfsmap+0x2b0/0x620 [ 3199.921669] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3199.922183] ? find_held_lock+0x2c/0x110 [ 3199.922646] ? avc_has_extended_perms+0x675/0xf40 [ 3199.923212] ? lock_downgrade+0x6d0/0x6d0 [ 3199.923675] __ext4_ioctl+0x8ad/0x4220 [ 3199.924114] ? ext4_reset_inode_seed+0x450/0x450 [ 3199.924653] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3199.925240] ? find_held_lock+0x2c/0x110 [ 3199.925702] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3199.926347] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3199.926932] ? do_vfs_ioctl+0x283/0x10d0 [ 3199.927390] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3199.927972] ? generic_block_fiemap+0x60/0x60 [ 3199.928474] ? lock_downgrade+0x6d0/0x6d0 [ 3199.928935] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3199.929474] ? wait_for_completion_io+0x270/0x270 [ 3199.930020] ? selinux_file_ioctl+0xb6/0x270 [ 3199.930523] ? __ext4_ioctl+0x4220/0x4220 [ 3199.930993] __x64_sys_ioctl+0x19a/0x210 [ 3199.931446] do_syscall_64+0x33/0x40 [ 3199.931863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3199.932436] RIP: 0033:0x7fb4d3c71b19 [ 3199.932851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3199.934926] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3199.935770] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3199.936572] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3199.937366] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3199.938158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3199.938961] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3199.954836] loop4: detected capacity change from 0 to 8388096 [ 3199.961198] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ18446744073709551615" or missing value 19:40:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 65) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3199.995163] FAULT_INJECTION: forcing a failure. [ 3199.995163] name failslab, interval 1, probability 0, space 0, times 0 [ 3199.996563] CPU: 1 PID: 14764 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3199.997347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3199.998280] Call Trace: [ 3199.998582] dump_stack+0x107/0x167 [ 3199.999018] should_fail.cold+0x5/0xa [ 3199.999451] ? create_object.isra.0+0x3a/0xa30 [ 3199.999964] should_failslab+0x5/0x20 [ 3200.000392] kmem_cache_alloc+0x5b/0x310 [ 3200.000847] create_object.isra.0+0x3a/0xa30 [ 3200.001341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3200.001913] kmem_cache_alloc_trace+0x151/0x320 [ 3200.002448] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3200.002986] ? lock_chain_count+0x20/0x20 [ 3200.003455] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.004033] ? do_swap+0x134/0x210 [ 3200.004436] ? sort_r+0x239/0x360 [ 3200.004826] ? ext4_file_open+0xa50/0xa50 [ 3200.005293] ext4_getfsmap+0x695/0x990 [ 3200.005734] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.006309] ? ext4_fsmap_to_internal+0x260/0x260 [ 3200.006861] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3200.007455] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.008037] ext4_ioc_getfsmap+0x2b0/0x620 [ 3200.008513] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3200.009028] ? find_held_lock+0x2c/0x110 [ 3200.009485] ? avc_has_extended_perms+0x675/0xf40 [ 3200.010046] ? lock_downgrade+0x6d0/0x6d0 [ 3200.010515] __ext4_ioctl+0x8ad/0x4220 [ 3200.010970] ? ext4_reset_inode_seed+0x450/0x450 [ 3200.011502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3200.012092] ? find_held_lock+0x2c/0x110 [ 3200.012557] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3200.013205] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3200.013785] ? do_vfs_ioctl+0x283/0x10d0 [ 3200.014241] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3200.014832] ? generic_block_fiemap+0x60/0x60 [ 3200.015333] ? lock_downgrade+0x6d0/0x6d0 [ 3200.015803] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3200.016343] ? wait_for_completion_io+0x270/0x270 [ 3200.016889] ? selinux_file_ioctl+0xb6/0x270 [ 3200.017385] ? __ext4_ioctl+0x4220/0x4220 [ 3200.017853] __x64_sys_ioctl+0x19a/0x210 [ 3200.018309] do_syscall_64+0x33/0x40 [ 3200.018744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3200.019318] RIP: 0033:0x7fcaa5e39b19 [ 3200.019737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3200.021807] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:40:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 69) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3200.022662] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3200.023620] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3200.024446] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3200.025249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3200.026046] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:40:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 59) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3200.098892] FAULT_INJECTION: forcing a failure. [ 3200.098892] name failslab, interval 1, probability 0, space 0, times 0 [ 3200.100362] CPU: 1 PID: 14768 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3200.101303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3200.102250] Call Trace: [ 3200.102552] dump_stack+0x107/0x167 [ 3200.102972] should_fail.cold+0x5/0xa [ 3200.103404] ? create_object.isra.0+0x3a/0xa30 [ 3200.103919] should_failslab+0x5/0x20 [ 3200.104350] kmem_cache_alloc+0x5b/0x310 [ 3200.104813] ? lock_downgrade+0x6d0/0x6d0 [ 3200.105286] create_object.isra.0+0x3a/0xa30 [ 3200.105783] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3200.106364] kmem_cache_alloc_trace+0x151/0x320 [ 3200.106900] ext4_getfsmap_datadev+0x719/0x25c0 [ 3200.107429] ? lock_chain_count+0x20/0x20 [ 3200.107893] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.108474] ? do_swap+0x134/0x210 [ 3200.108876] ? sort_r+0x239/0x360 [ 3200.109270] ? ext4_file_open+0xa50/0xa50 [ 3200.109746] ext4_getfsmap+0x695/0x990 [ 3200.110190] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.110769] ? ext4_fsmap_to_internal+0x260/0x260 [ 3200.111316] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3200.111911] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.112493] ext4_ioc_getfsmap+0x2b0/0x620 [ 3200.112966] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3200.113478] ? find_held_lock+0x2c/0x110 [ 3200.113937] ? avc_has_extended_perms+0x675/0xf40 [ 3200.114018] FAULT_INJECTION: forcing a failure. [ 3200.114018] name failslab, interval 1, probability 0, space 0, times 0 [ 3200.114498] ? lock_downgrade+0x6d0/0x6d0 [ 3200.114512] __ext4_ioctl+0x8ad/0x4220 [ 3200.114536] ? ext4_reset_inode_seed+0x450/0x450 [ 3200.118255] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3200.118854] ? find_held_lock+0x2c/0x110 [ 3200.119323] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3200.119970] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3200.120551] ? do_vfs_ioctl+0x283/0x10d0 [ 3200.121006] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3200.121593] ? generic_block_fiemap+0x60/0x60 [ 3200.122108] ? lock_downgrade+0x6d0/0x6d0 [ 3200.122579] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3200.123133] ? wait_for_completion_io+0x270/0x270 [ 3200.123681] ? selinux_file_ioctl+0xb6/0x270 [ 3200.124174] ? __ext4_ioctl+0x4220/0x4220 [ 3200.124640] __x64_sys_ioctl+0x19a/0x210 [ 3200.125098] do_syscall_64+0x33/0x40 [ 3200.125519] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3200.126093] RIP: 0033:0x7f81caa8db19 [ 3200.126514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3200.128587] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3200.129445] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3200.130244] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3200.131051] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3200.131852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3200.132653] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3200.133475] CPU: 0 PID: 14770 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3200.134945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3200.136686] Call Trace: [ 3200.137241] dump_stack+0x107/0x167 [ 3200.138011] should_fail.cold+0x5/0xa [ 3200.138823] ? create_object.isra.0+0x3a/0xa30 [ 3200.139775] should_failslab+0x5/0x20 [ 3200.140572] kmem_cache_alloc+0x5b/0x310 [ 3200.141425] create_object.isra.0+0x3a/0xa30 [ 3200.142344] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3200.143415] kmem_cache_alloc_trace+0x151/0x320 [ 3200.144393] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3200.145388] ? lock_chain_count+0x20/0x20 [ 3200.146258] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.147336] ? do_swap+0x134/0x210 [ 3200.148079] ? sort_r+0x239/0x360 [ 3200.148801] ? ext4_file_open+0xa50/0xa50 [ 3200.149671] ext4_getfsmap+0x695/0x990 [ 3200.150482] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.151555] ? ext4_fsmap_to_internal+0x260/0x260 [ 3200.152559] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3200.153662] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.154760] ext4_ioc_getfsmap+0x2b0/0x620 [ 3200.155639] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3200.156593] ? find_held_lock+0x2c/0x110 [ 3200.157450] ? avc_has_extended_perms+0x675/0xf40 [ 3200.158491] ? lock_downgrade+0x6d0/0x6d0 [ 3200.159363] __ext4_ioctl+0x8ad/0x4220 [ 3200.160183] ? ext4_reset_inode_seed+0x450/0x450 [ 3200.161171] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3200.162272] ? find_held_lock+0x2c/0x110 [ 3200.163146] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3200.164345] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3200.165424] ? do_vfs_ioctl+0x283/0x10d0 [ 3200.166278] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3200.167383] ? generic_block_fiemap+0x60/0x60 [ 3200.168321] ? lock_downgrade+0x6d0/0x6d0 [ 3200.169183] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3200.170190] ? wait_for_completion_io+0x270/0x270 [ 3200.171220] ? selinux_file_ioctl+0xb6/0x270 [ 3200.172138] ? __ext4_ioctl+0x4220/0x4220 [ 3200.173004] __x64_sys_ioctl+0x19a/0x210 [ 3200.173881] do_syscall_64+0x33/0x40 [ 3200.174661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3200.175737] RIP: 0033:0x7fb4d3c71b19 [ 3200.176510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3200.180357] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3200.181947] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3200.183441] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3200.184933] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3200.186417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3200.187913] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:40:45 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4707, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x20) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000000c) dup2(r2, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x2, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 3200.231160] loop4: detected capacity change from 0 to 32768 [ 3200.234437] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:40:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 94) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3200.325216] FAULT_INJECTION: forcing a failure. [ 3200.325216] name failslab, interval 1, probability 0, space 0, times 0 [ 3200.327960] CPU: 0 PID: 14780 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3200.329404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3200.331147] Call Trace: [ 3200.331711] dump_stack+0x107/0x167 [ 3200.332474] should_fail.cold+0x5/0xa [ 3200.333274] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3200.334273] should_failslab+0x5/0x20 [ 3200.335081] kmem_cache_alloc_trace+0x55/0x320 [ 3200.336030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3200.337097] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3200.338083] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.339151] ? lock_acquire+0x197/0x470 [ 3200.339978] ? find_held_lock+0x2c/0x110 [ 3200.340823] ? mark_lock+0xf5/0x2df0 [ 3200.341605] ? do_swap+0x134/0x210 [ 3200.342348] ? sort_r+0x239/0x360 [ 3200.343079] ? ext4_file_open+0xa50/0xa50 [ 3200.343951] ext4_getfsmap+0x695/0x990 [ 3200.344767] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.345824] ? ext4_fsmap_to_internal+0x260/0x260 [ 3200.346841] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3200.347943] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3200.349019] ext4_ioc_getfsmap+0x2b0/0x620 [ 3200.349896] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3200.350856] ? find_held_lock+0x2c/0x110 [ 3200.351706] ? avc_has_extended_perms+0x675/0xf40 [ 3200.352745] ? lock_downgrade+0x6d0/0x6d0 [ 3200.353613] __ext4_ioctl+0x8ad/0x4220 [ 3200.354433] ? ext4_reset_inode_seed+0x450/0x450 [ 3200.355429] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3200.356519] ? find_held_lock+0x2c/0x110 [ 3200.357381] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3200.358577] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3200.359663] ? do_vfs_ioctl+0x283/0x10d0 [ 3200.360513] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3200.361602] ? generic_block_fiemap+0x60/0x60 [ 3200.362534] ? lock_downgrade+0x6d0/0x6d0 [ 3200.363412] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3200.364414] ? wait_for_completion_io+0x270/0x270 [ 3200.365422] ? selinux_file_ioctl+0xb6/0x270 [ 3200.366338] ? __ext4_ioctl+0x4220/0x4220 [ 3200.367216] __x64_sys_ioctl+0x19a/0x210 [ 3200.368062] do_syscall_64+0x33/0x40 [ 3200.368837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3200.369899] RIP: 0033:0x7f7edf809b19 [ 3200.370675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3200.374502] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3200.376089] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3200.377578] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3200.379068] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3200.380549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3200.382042] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3200.386992] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3202.527178] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3202.529642] CPU: 0 PID: 289 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 3202.530975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3202.532597] Call Trace: [ 3202.533122] dump_stack+0x107/0x167 [ 3202.533835] dump_header+0x107/0x689 [ 3202.534570] oom_kill_process.cold+0x10/0x15 [ 3202.535450] out_of_memory+0x1149/0x1440 [ 3202.536258] ? oom_killer_disable+0x280/0x280 [ 3202.537140] ? mutex_trylock+0x237/0x2b0 [ 3202.537945] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3202.539116] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3202.540284] ? lock_acquire+0xd7/0x470 [ 3202.541054] ? warn_alloc+0x190/0x190 [ 3202.541823] __alloc_pages_nodemask+0x51d/0x600 [ 3202.542745] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3202.543925] ? find_get_entry+0x2c8/0x740 [ 3202.544748] alloc_pages_current+0x187/0x280 [ 3202.545612] __page_cache_alloc+0x2d2/0x360 [ 3202.546472] pagecache_get_page+0x2c7/0xc80 [ 3202.547331] filemap_fault+0x177d/0x2210 [ 3202.548132] ? read_cache_page_gfp+0x30/0x30 [ 3202.548997] ? replace_page_cache_page+0x1200/0x1200 [ 3202.549990] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3202.551039] ext4_filemap_fault+0x87/0xc0 [ 3202.551846] __do_fault+0x113/0x410 [ 3202.552575] handle_mm_fault+0x1e53/0x3500 [ 3202.553412] ? __pmd_alloc+0x630/0x630 [ 3202.554185] ? vmacache_find+0x55/0x2a0 [ 3202.554992] do_user_addr_fault+0x56e/0xc60 [ 3202.555860] exc_page_fault+0xa2/0x1a0 [ 3202.556622] ? asm_exc_page_fault+0x8/0x30 [ 3202.557466] asm_exc_page_fault+0x1e/0x30 [ 3202.558271] RIP: 0033:0x7f7e5a94961f [ 3202.559014] Code: Unable to access opcode bytes at RIP 0x7f7e5a9495f5. [ 3202.560288] RSP: 002b:00007ffdfd11caf0 EFLAGS: 00010206 [ 3202.561344] RAX: 0000000000000000 RBX: 000000000000047e RCX: 0000000000000000 [ 3202.562737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3202.564131] RBP: 00007ffdfd11cb4c R08: 0000000000000000 R09: 00007ffdfd1fa080 [ 3202.565520] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032 [ 3202.566925] R13: 000000000030d600 R14: 000000000000000f R15: 00007ffdfd11cbb0 [ 3202.570142] Mem-Info: [ 3202.570897] active_anon:11747 inactive_anon:45392 isolated_anon:0 [ 3202.570897] active_file:8 inactive_file:30 isolated_file:0 [ 3202.570897] unevictable:0 dirty:0 writeback:0 [ 3202.570897] slab_reclaimable:8834 slab_unreclaimable:59143 [ 3202.570897] mapped:69643 shmem:116 pagetables:1023 bounce:0 [ 3202.570897] free:2738 free_pcp:0 free_cma:0 [ 3202.577268] Node 0 active_anon:46988kB inactive_anon:181568kB active_file:32kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278572kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4064kB all_unreclaimable? yes [ 3202.581815] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3202.588281] lowmem_reserve[]: 0 1616 1616 1616 [ 3202.589484] Node 0 DMA32 free:4444kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:46988kB inactive_anon:181568kB active_file:40kB inactive_file:96kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:4092kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3202.596454] lowmem_reserve[]: 0 0 0 0 [ 3202.597281] Node 0 DMA: 3*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3202.600035] Node 0 DMA32: 468*4kB (ME) 136*8kB (UME) 48*16kB (UME) 20*32kB (M) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4944kB [ 3202.602907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3202.604599] 166 total pagecache pages [ 3202.605378] 0 pages in swap cache [ 3202.606068] Swap cache stats: add 0, delete 0, find 0/0 [ 3202.607178] Free swap = 0kB [ 3202.607921] Total swap = 0kB [ 3202.608550] 524158 pages RAM [ 3202.609142] 0 pages HighMem/MovableOnly [ 3202.610140] 105069 pages reserved [ 3202.610939] Unreclaimable slab info: [ 3202.611954] Name Used Total [ 3202.613117] pid_2 48KB 48KB [ 3202.614214] IEEE-802.15.4-RAW 31KB 31KB [ 3202.615715] fib6_nodes 28KB 28KB [ 3202.617102] ip6_dst_cache 41KB 41KB [ 3202.618498] PINGv6 30KB 30KB [ 3202.619826] RAWv6 154KB 154KB [ 3202.620971] UDPv6 62KB 62KB [ 3202.622114] TCPv6 62KB 62KB [ 3202.623294] scsi_sense_cache 8KB 8KB [ 3202.624441] sd_ext_cdb 3KB 3KB [ 3202.625579] virtio_scsi_cmd 16KB 16KB [ 3202.626738] sgpool-128 119KB 119KB [ 3202.627900] sgpool-64 63KB 63KB [ 3202.629034] sgpool-32 47KB 47KB [ 3202.630185] sgpool-16 52KB 52KB [ 3202.631378] sgpool-8 56KB 56KB [ 3202.632529] io_kiocb 45KB 45KB [ 3202.633726] mqueue_inode_cache 62KB 62KB [ 3202.634901] nfs_commit_data 15KB 15KB [ 3202.636075] nfs_write_data 47KB 47KB [ 3202.637256] jbd2_inode 11KB 11KB [ 3202.638417] ext4_system_zone 3KB 3KB [ 3202.639575] ext4_io_end_vec 7KB 7KB [ 3202.640717] ext4_bio_post_read_ctx 15KB 15KB [ 3202.641976] dnotify_mark 3KB 3KB [ 3202.643132] dnotify_struct 3KB 3KB [ 3202.644294] bio-2 4KB 4KB [ 3202.645433] pid_namespace 7KB 7KB [ 3202.646601] posix_timers_cache 7KB 7KB [ 3202.647780] rpc_buffers 31KB 31KB [ 3202.649017] rpc_tasks 3KB 3KB [ 3202.650195] UNIX 222KB 352KB [ 3202.651407] tcp_bind_bucket 4KB 4KB [ 3202.652553] ip_fib_trie 8KB 8KB [ 3202.653694] ip_fib_alias 15KB 15KB [ 3202.655063] ip_dst_cache 8KB 8KB [ 3202.656442] PING 62KB 62KB [ 3202.657828] RAW 61KB 61KB [ 3202.659049] UDP 190KB 283KB [ 3202.660251] request_sock_TCP 7KB 7KB [ 3202.661437] TCP 60KB 60KB [ 3202.662623] hugetlbfs_inode_cache 30KB 30KB [ 3202.663878] bio-1 11KB 11KB [ 3202.665040] eventpoll_pwq 23KB 23KB [ 3202.666196] eventpoll_epi 43KB 43KB [ 3202.667376] inotify_inode_mark 105KB 105KB [ 3202.668585] request_queue 60KB 60KB [ 3202.669717] blkdev_ioc 18KB 18KB [ 3202.670905] bio-0 144KB 144KB [ 3202.672046] biovec-max 1993KB 1993KB [ 3202.673265] biovec-64 110KB 189KB [ 3202.674458] biovec-16 67KB 67KB [ 3202.675745] uid_cache 8KB 8KB [ 3202.676938] dmaengine-unmap-2 4KB 4KB [ 3202.678142] audit_buffer 7KB 7KB [ 3202.679338] skbuff_fclone_cache 90KB 90KB [ 3202.680564] skbuff_head_cache 301KB 386KB [ 3202.681733] file_lock_cache 74KB 74KB [ 3202.682915] file_lock_ctx 7KB 7KB [ 3202.684079] fsnotify_mark_connector 36KB 36KB [ 3202.685374] net_namespace 86KB 86KB [ 3202.686507] task_delay_info 108KB 108KB [ 3202.687676] taskstats 100KB 100KB [ 3202.688833] proc_dir_entry 330KB 330KB [ 3202.689971] pde_opener 35KB 35KB [ 3202.691175] seq_file 63KB 63KB [ 3202.692362] sigqueue 129KB 129KB [ 3202.693534] shmem_inode_cache 1220KB 1257KB [ 3202.694737] kernfs_iattrs_cache 227KB 227KB [ 3202.695915] kernfs_node_cache 5191KB 5191KB [ 3202.697108] mnt_cache 133KB 133KB [ 3202.698267] filp 1541KB 1777KB [ 3202.699452] names_cache 10629KB 12512KB [ 3202.700607] hashtab_node 274KB 274KB [ 3202.701764] ebitmap_node 1149KB 1149KB [ 3202.702913] avtab_node 4976KB 4976KB [ 3202.704068] avc_node 31KB 31KB [ 3202.705259] lsm_inode_cache 3300KB 3300KB [ 3202.706394] lsm_file_cache 216KB 216KB [ 3202.707566] key_jar 39KB 39KB [ 3202.708737] uts_namespace 15KB 15KB [ 3202.709916] nsproxy 7KB 7KB [ 3202.711123] vm_area_struct 760KB 960KB [ 3202.712296] fs_cache 52KB 52KB [ 3202.713498] files_cache 136KB 191KB [ 3202.714647] signal_cache 256KB 370KB [ 3202.715812] sighand_cache 330KB 330KB [ 3202.716957] task_struct 1063KB 1233KB [ 3202.718117] cred_jar 89KB 148KB [ 3202.719324] anon_vma_chain 149KB 196KB [ 3202.720511] anon_vma 227KB 227KB [ 3202.721717] pid 63KB 63KB [ 3202.722894] Acpi-Operand 203KB 233KB [ 3202.724027] Acpi-ParseExt 23KB 23KB [ 3202.725241] Acpi-Parse 173KB 189KB [ 3202.726438] Acpi-State 141KB 157KB [ 3202.727633] Acpi-Namespace 24KB 24KB [ 3202.728833] numa_policy 3KB 3KB [ 3202.730017] trace_event_file 176KB 176KB [ 3202.731256] ftrace_event_field 280KB 280KB [ 3202.732466] pool_workqueue 32KB 32KB [ 3202.733668] task_group 16KB 16KB [ 3202.734859] mm_struct 315KB 315KB [ 3202.736023] vmap_area 118KB 118KB [ 3202.737247] page->ptl 189KB 196KB [ 3202.738452] kmemleak_scan_area 143KB 143KB [ 3202.740466] kmemleak_object 138564KB 150409KB [ 3202.741691] kmalloc-8k 4576KB 4736KB [ 3202.742853] kmalloc-4k 6192KB 7328KB [ 3202.744016] kmalloc-2k 3776KB 4288KB [ 3202.745218] kmalloc-1k 2218KB 3232KB [ 3202.746429] kmalloc-512 2529KB 4128KB [ 3202.747583] kmalloc-256 1240KB 1240KB [ 3202.748736] kmalloc-192 552KB 552KB [ 3202.749901] kmalloc-128 455KB 504KB [ 3202.751104] kmalloc-96 342KB 612KB [ 3202.752291] kmalloc-64 925KB 1328KB [ 3202.753454] kmalloc-32 759KB 844KB [ 3202.754584] kmalloc-16 346KB 348KB [ 3202.755746] kmalloc-8 334KB 334KB [ 3202.757023] kmem_cache_node 43KB 43KB [ 3202.758428] kmem_cache 75KB 75KB [ 3202.759834] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=289,uid=0 [ 3202.763713] Out of memory (oom_kill_allocating_task): Killed process 289 (syz-executor.5) total-vm:93280kB, anon-rss:384kB, file-rss:34628kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 3203.089929] syz-executor.6 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3203.092197] CPU: 1 PID: 288 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 3203.093604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3203.095346] Call Trace: [ 3203.095907] dump_stack+0x107/0x167 [ 3203.096677] dump_header+0x107/0x689 [ 3203.097464] oom_kill_process.cold+0x10/0x15 [ 3203.098394] out_of_memory+0x1149/0x1440 [ 3203.099255] ? oom_killer_disable+0x280/0x280 [ 3203.100195] ? mutex_trylock+0x237/0x2b0 [ 3203.101036] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3203.102282] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3203.103529] ? lock_acquire+0xd7/0x470 [ 3203.104342] ? warn_alloc+0x190/0x190 [ 3203.105157] __alloc_pages_nodemask+0x51d/0x600 [ 3203.106126] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3203.107396] ? find_get_entry+0x2c8/0x740 [ 3203.108275] alloc_pages_current+0x187/0x280 [ 3203.109201] __page_cache_alloc+0x2d2/0x360 [ 3203.110102] pagecache_get_page+0x2c7/0xc80 [ 3203.111019] filemap_fault+0x177d/0x2210 [ 3203.111886] ? read_cache_page_gfp+0x30/0x30 [ 3203.112805] ? replace_page_cache_page+0x1200/0x1200 [ 3203.113866] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3203.114990] ext4_filemap_fault+0x87/0xc0 [ 3203.115860] __do_fault+0x113/0x410 [ 3203.116628] handle_mm_fault+0x1e53/0x3500 [ 3203.117528] ? __pmd_alloc+0x630/0x630 [ 3203.118355] ? vmacache_find+0x55/0x2a0 [ 3203.119197] do_user_addr_fault+0x56e/0xc60 [ 3203.120116] exc_page_fault+0xa2/0x1a0 [ 3203.120929] ? asm_exc_page_fault+0x8/0x30 [ 3203.121810] asm_exc_page_fault+0x1e/0x30 [ 3203.122674] RIP: 0033:0x7f9aa3a09688 [ 3203.123455] Code: Unable to access opcode bytes at RIP 0x7f9aa3a0965e. [ 3203.124814] RSP: 002b:00007fff53133f20 EFLAGS: 00010202 [ 3203.125922] RAX: 0000001b2d720000 RBX: 00000000000004c7 RCX: 000000000030d7e8 [ 3203.127420] RDX: 000000000030db8f RSI: 00007fff53133fe0 RDI: 0000000000000001 [ 3203.128906] RBP: 00007fff53133f7c R08: 0000000000000c81 R09: 00007fff5315c080 [ 3203.130393] R10: 00007fff5315c090 R11: 00000000005bc88c R12: 0000000000000032 [ 3203.131881] R13: 000000000030d60e R14: 0000000000000014 R15: 00007fff53133fe0 [ 3203.133507] Mem-Info: [ 3203.134050] active_anon:11747 inactive_anon:45382 isolated_anon:0 [ 3203.134050] active_file:7 inactive_file:30 isolated_file:0 [ 3203.134050] unevictable:0 dirty:0 writeback:0 [ 3203.134050] slab_reclaimable:8834 slab_unreclaimable:59143 [ 3203.134050] mapped:69634 shmem:116 pagetables:996 bounce:0 [ 3203.134050] free:2808 free_pcp:96 free_cma:0 [ 3203.140601] Node 0 active_anon:46988kB inactive_anon:181528kB active_file:28kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4064kB all_unreclaimable? yes [ 3203.146141] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3203.151657] lowmem_reserve[]: 0 1616 1616 1616 [ 3203.152707] Node 0 DMA32 free:4724kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:46988kB inactive_anon:181528kB active_file:28kB inactive_file:120kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3984kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB [ 3203.158652] lowmem_reserve[]: 0 0 0 0 [ 3203.159523] Node 0 DMA: 3*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3203.162323] Node 0 DMA32: 475*4kB (ME) 135*8kB (ME) 47*16kB (ME) 21*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4724kB [ 3203.165305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3203.167104] 157 total pagecache pages [ 3203.167923] 0 pages in swap cache [ 3203.168666] Swap cache stats: add 0, delete 0, find 0/0 [ 3203.169800] Free swap = 0kB [ 3203.170457] Total swap = 0kB [ 3203.171093] 524158 pages RAM [ 3203.171752] 0 pages HighMem/MovableOnly [ 3203.172599] 105069 pages reserved [ 3203.173348] Unreclaimable slab info: [ 3203.174118] Name Used Total [ 3203.175315] pid_2 48KB 48KB [ 3203.176463] IEEE-802.15.4-RAW 31KB 31KB [ 3203.177604] fib6_nodes 28KB 28KB [ 3203.178758] ip6_dst_cache 41KB 41KB [ 3203.179890] PINGv6 30KB 30KB [ 3203.181020] RAWv6 154KB 154KB [ 3203.182147] UDPv6 62KB 62KB [ 3203.183292] TCPv6 62KB 62KB [ 3203.184423] scsi_sense_cache 8KB 8KB [ 3203.185567] sd_ext_cdb 3KB 3KB [ 3203.186705] virtio_scsi_cmd 16KB 16KB [ 3203.187861] sgpool-128 119KB 119KB [ 3203.189007] sgpool-64 63KB 63KB [ 3203.190141] sgpool-32 47KB 47KB [ 3203.191287] sgpool-16 52KB 52KB [ 3203.192429] sgpool-8 56KB 56KB [ 3203.193565] io_kiocb 45KB 45KB [ 3203.194706] mqueue_inode_cache 62KB 62KB [ 3203.195862] nfs_commit_data 15KB 15KB [ 3203.196991] nfs_write_data 47KB 47KB [ 3203.198134] jbd2_inode 11KB 11KB [ 3203.199276] ext4_system_zone 3KB 3KB [ 3203.200414] ext4_io_end_vec 7KB 7KB [ 3203.201550] ext4_bio_post_read_ctx 15KB 15KB [ 3203.202791] dnotify_mark 3KB 3KB [ 3203.203929] dnotify_struct 3KB 3KB [ 3203.205055] bio-2 4KB 4KB [ 3203.206188] pid_namespace 7KB 7KB [ 3203.207323] posix_timers_cache 7KB 7KB [ 3203.208474] rpc_buffers 31KB 31KB [ 3203.209602] rpc_tasks 3KB 3KB [ 3203.210747] UNIX 222KB 352KB [ 3203.211885] tcp_bind_bucket 4KB 4KB [ 3203.213026] ip_fib_trie 8KB 8KB [ 3203.214163] ip_fib_alias 15KB 15KB [ 3203.215312] ip_dst_cache 8KB 8KB [ 3203.216445] PING 62KB 62KB [ 3203.217583] RAW 61KB 61KB [ 3203.218735] UDP 190KB 283KB [ 3203.219885] request_sock_TCP 7KB 7KB [ 3203.221038] TCP 60KB 60KB [ 3203.222172] hugetlbfs_inode_cache 30KB 30KB [ 3203.223377] bio-1 11KB 11KB [ 3203.224506] eventpoll_pwq 23KB 23KB [ 3203.225636] eventpoll_epi 43KB 43KB [ 3203.226779] inotify_inode_mark 105KB 105KB [ 3203.227918] request_queue 60KB 60KB [ 3203.229051] blkdev_ioc 18KB 18KB [ 3203.230188] bio-0 144KB 144KB [ 3203.231328] biovec-max 1993KB 1993KB [ 3203.232478] biovec-64 110KB 189KB [ 3203.233612] biovec-16 67KB 67KB [ 3203.234761] uid_cache 8KB 8KB [ 3203.235900] dmaengine-unmap-2 4KB 4KB [ 3203.237033] audit_buffer 7KB 7KB [ 3203.238183] skbuff_fclone_cache 90KB 90KB [ 3203.239361] skbuff_head_cache 351KB 386KB [ 3203.240505] file_lock_cache 74KB 74KB [ 3203.241632] file_lock_ctx 7KB 7KB [ 3203.242778] fsnotify_mark_connector 36KB 36KB [ 3203.244015] net_namespace 86KB 86KB [ 3203.245152] task_delay_info 108KB 108KB [ 3203.246284] taskstats 100KB 100KB [ 3203.247426] proc_dir_entry 330KB 330KB [ 3203.248563] pde_opener 35KB 35KB [ 3203.249693] seq_file 63KB 63KB [ 3203.250828] sigqueue 129KB 129KB [ 3203.251969] shmem_inode_cache 1220KB 1257KB [ 3203.253102] kernfs_iattrs_cache 227KB 227KB [ 3203.254271] kernfs_node_cache 5191KB 5191KB [ 3203.255415] mnt_cache 133KB 133KB [ 3203.256562] filp 1541KB 1777KB [ 3203.257717] names_cache 10629KB 12512KB [ 3203.258863] hashtab_node 274KB 274KB [ 3203.259991] ebitmap_node 1149KB 1149KB [ 3203.261125] avtab_node 4976KB 4976KB [ 3203.262263] avc_node 31KB 31KB [ 3203.263412] lsm_inode_cache 3300KB 3300KB [ 3203.264545] lsm_file_cache 216KB 216KB [ 3203.265679] key_jar 39KB 39KB [ 3203.266831] uts_namespace 15KB 15KB [ 3203.267967] nsproxy 7KB 7KB [ 3203.269116] vm_area_struct 760KB 960KB [ 3203.270289] fs_cache 52KB 52KB [ 3203.271434] files_cache 136KB 191KB [ 3203.272568] signal_cache 256KB 370KB [ 3203.273703] sighand_cache 330KB 330KB [ 3203.274852] task_struct 1063KB 1233KB [ 3203.276006] cred_jar 89KB 148KB [ 3203.277160] anon_vma_chain 149KB 196KB [ 3203.278312] anon_vma 227KB 227KB [ 3203.279487] pid 63KB 63KB [ 3203.280656] Acpi-Operand 203KB 233KB [ 3203.281804] Acpi-ParseExt 23KB 23KB [ 3203.282956] Acpi-Parse 173KB 189KB [ 3203.284108] Acpi-State 141KB 157KB [ 3203.285256] Acpi-Namespace 24KB 24KB [ 3203.286397] numa_policy 3KB 3KB [ 3203.287547] trace_event_file 176KB 176KB [ 3203.288693] ftrace_event_field 280KB 280KB [ 3203.289859] pool_workqueue 32KB 32KB [ 3203.291021] task_group 16KB 16KB [ 3203.292172] mm_struct 315KB 315KB [ 3203.293328] vmap_area 118KB 118KB [ 3203.294469] page->ptl 189KB 196KB [ 3203.295628] kmemleak_scan_area 143KB 143KB [ 3203.297655] kmemleak_object 138824KB 150409KB [ 3203.298843] kmalloc-8k 4576KB 4736KB [ 3203.300004] kmalloc-4k 6192KB 7328KB [ 3203.301167] kmalloc-2k 3776KB 4288KB [ 3203.302325] kmalloc-1k 2218KB 3232KB [ 3203.303506] kmalloc-512 2701KB 4128KB [ 3203.304657] kmalloc-256 1240KB 1240KB [ 3203.305809] kmalloc-192 552KB 552KB [ 3203.306968] kmalloc-128 455KB 504KB [ 3203.308133] kmalloc-96 342KB 612KB [ 3203.309305] kmalloc-64 941KB 1328KB [ 3203.310458] kmalloc-32 759KB 844KB [ 3203.311620] kmalloc-16 346KB 348KB [ 3203.312767] kmalloc-8 334KB 334KB [ 3203.313915] kmem_cache_node 43KB 43KB [ 3203.315073] kmem_cache 75KB 75KB [ 3203.316217] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz6,mems_allowed=0,global_oom,task_memcg=/syz6,task=syz-executor.6,pid=288,uid=0 [ 3203.319260] Out of memory (oom_kill_allocating_task): Killed process 288 (syz-executor.6) total-vm:93280kB, anon-rss:384kB, file-rss:34564kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 3203.417359] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3203.419481] CPU: 0 PID: 177 Comm: in:imklog Not tainted 5.10.252 #1 [ 3203.420814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3203.422532] Call Trace: [ 3203.423097] dump_stack+0x107/0x167 [ 3203.423870] dump_header+0x107/0x689 [ 3203.424649] oom_kill_process.cold+0x10/0x15 [ 3203.425563] out_of_memory+0x1149/0x1440 [ 3203.426419] ? oom_killer_disable+0x280/0x280 [ 3203.427371] ? mutex_trylock+0x237/0x2b0 [ 3203.428266] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3203.429516] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3203.430751] ? lock_acquire+0xd7/0x470 [ 3203.431567] ? warn_alloc+0x190/0x190 [ 3203.432392] __alloc_pages_nodemask+0x51d/0x600 [ 3203.433375] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3203.434640] ? find_get_entry+0x2c8/0x740 [ 3203.435519] alloc_pages_current+0x187/0x280 [ 3203.436451] __page_cache_alloc+0x2d2/0x360 [ 3203.437347] pagecache_get_page+0x2c7/0xc80 [ 3203.438258] filemap_fault+0x177d/0x2210 [ 3203.439103] ? read_cache_page_gfp+0x30/0x30 [ 3203.440015] ? replace_page_cache_page+0x1200/0x1200 [ 3203.441083] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3203.442193] ext4_filemap_fault+0x87/0xc0 [ 3203.443061] __do_fault+0x113/0x410 [ 3203.443847] handle_mm_fault+0x1e53/0x3500 [ 3203.444756] ? __pmd_alloc+0x630/0x630 [ 3203.445590] ? vmacache_find+0x55/0x2a0 [ 3203.446414] ? vmacache_update+0xce/0x140 [ 3203.447305] do_user_addr_fault+0x56e/0xc60 [ 3203.448228] exc_page_fault+0xa2/0x1a0 [ 3203.449043] ? asm_exc_page_fault+0x8/0x30 [ 3203.449925] asm_exc_page_fault+0x1e/0x30 [ 3203.450810] RIP: 0033:0x7f43f1dbe08c [ 3203.451588] Code: Unable to access opcode bytes at RIP 0x7f43f1dbe062. [ 3203.452961] RSP: 002b:00007f43f135a4d0 EFLAGS: 00010246 [ 3203.454059] RAX: 000000000000095f RBX: 0000000000000000 RCX: 00007f43f1dbe08c [ 3203.455553] RDX: 0000000000001fa0 RSI: 00007f43f135ad00 RDI: 0000000000000005 [ 3203.457030] RBP: 0000562cb84da4c0 R08: 0000000000000000 R09: 0000562cb84d6e88 [ 3203.458516] R10: a3d70a3d70a3d70b R11: 0000000000000246 R12: 00007f43f135ad00 [ 3203.460011] R13: 0000000000001fa0 R14: 00007f43f135ad00 R15: 00007f43f135ad60 [ 3203.463463] Mem-Info: [ 3203.464005] active_anon:11747 inactive_anon:45382 isolated_anon:0 [ 3203.464005] active_file:7 inactive_file:25 isolated_file:0 [ 3203.464005] unevictable:0 dirty:0 writeback:0 [ 3203.464005] slab_reclaimable:8834 slab_unreclaimable:59143 [ 3203.464005] mapped:69634 shmem:116 pagetables:996 bounce:0 [ 3203.464005] free:2745 free_pcp:158 free_cma:0 [ 3203.470671] Node 0 active_anon:46988kB inactive_anon:181528kB active_file:28kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4064kB all_unreclaimable? yes [ 3203.475993] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3203.481786] lowmem_reserve[]: 0 1616 1616 1616 [ 3203.482833] Node 0 DMA32 free:4472kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:46988kB inactive_anon:181528kB active_file:28kB inactive_file:100kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3984kB bounce:0kB free_pcp:632kB local_pcp:384kB free_cma:0kB [ 3203.488816] lowmem_reserve[]: 0 0 0 0 [ 3203.489690] Node 0 DMA: 3*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3203.492519] Node 0 DMA32: 412*4kB (ME) 135*8kB (ME) 47*16kB (ME) 21*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4472kB [ 3203.495530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3203.497351] 157 total pagecache pages [ 3203.498137] 0 pages in swap cache [ 3203.498911] Swap cache stats: add 0, delete 0, find 0/0 [ 3203.500060] Free swap = 0kB [ 3203.500734] Total swap = 0kB [ 3203.501401] 524158 pages RAM [ 3203.502027] 0 pages HighMem/MovableOnly [ 3203.502907] 105069 pages reserved [ 3203.503676] Unreclaimable slab info: [ 3203.504486] Name Used Total [ 3203.505671] pid_2 48KB 48KB [ 3203.506819] IEEE-802.15.4-RAW 31KB 31KB [ 3203.507971] fib6_nodes 28KB 28KB [ 3203.509106] ip6_dst_cache 41KB 41KB [ 3203.510266] PINGv6 30KB 30KB [ 3203.511441] RAWv6 154KB 154KB [ 3203.512599] UDPv6 62KB 62KB [ 3203.513741] TCPv6 62KB 62KB [ 3203.514903] scsi_sense_cache 8KB 8KB [ 3203.516063] sd_ext_cdb 3KB 3KB [ 3203.517284] virtio_scsi_cmd 16KB 16KB [ 3203.518459] sgpool-128 119KB 119KB [ 3203.519620] sgpool-64 63KB 63KB [ 3203.520766] sgpool-32 47KB 47KB [ 3203.521899] sgpool-16 52KB 52KB [ 3203.523061] sgpool-8 56KB 56KB [ 3203.524250] io_kiocb 45KB 45KB [ 3203.525413] mqueue_inode_cache 62KB 62KB [ 3203.526585] nfs_commit_data 15KB 15KB [ 3203.527758] nfs_write_data 47KB 47KB [ 3203.528909] jbd2_inode 11KB 11KB [ 3203.530068] ext4_system_zone 3KB 3KB [ 3203.531249] ext4_io_end_vec 7KB 7KB [ 3203.532403] ext4_bio_post_read_ctx 15KB 15KB [ 3203.533653] dnotify_mark 3KB 3KB [ 3203.534812] dnotify_struct 3KB 3KB [ 3203.535944] bio-2 4KB 4KB [ 3203.537123] pid_namespace 7KB 7KB [ 3203.538273] posix_timers_cache 7KB 7KB [ 3203.539444] rpc_buffers 31KB 31KB [ 3203.540600] rpc_tasks 3KB 3KB [ 3203.541733] UNIX 222KB 352KB [ 3203.542911] tcp_bind_bucket 4KB 4KB [ 3203.544043] ip_fib_trie 8KB 8KB [ 3203.545202] ip_fib_alias 15KB 15KB [ 3203.546374] ip_dst_cache 8KB 8KB [ 3203.547520] PING 62KB 62KB [ 3203.548673] RAW 61KB 61KB [ 3203.549822] UDP 190KB 283KB [ 3203.550981] request_sock_TCP 7KB 7KB [ 3203.552133] TCP 60KB 60KB [ 3203.553305] hugetlbfs_inode_cache 30KB 30KB [ 3203.554840] bio-1 11KB 11KB [ 3203.555986] eventpoll_pwq 23KB 23KB [ 3203.557152] eventpoll_epi 43KB 43KB [ 3203.558300] inotify_inode_mark 105KB 105KB [ 3203.559468] request_queue 60KB 60KB [ 3203.560610] blkdev_ioc 18KB 18KB [ 3203.561740] bio-0 144KB 144KB [ 3203.562903] biovec-max 1993KB 1993KB [ 3203.564042] biovec-64 110KB 189KB [ 3203.565210] biovec-16 67KB 67KB [ 3203.566384] uid_cache 8KB 8KB [ 3203.567631] dmaengine-unmap-2 4KB 4KB [ 3203.568802] audit_buffer 7KB 7KB [ 3203.569969] skbuff_fclone_cache 90KB 90KB [ 3203.571178] skbuff_head_cache 382KB 386KB [ 3203.572329] file_lock_cache 74KB 74KB [ 3203.573462] file_lock_ctx 7KB 7KB [ 3203.574633] fsnotify_mark_connector 36KB 36KB [ 3203.575999] net_namespace 86KB 86KB [ 3203.577391] task_delay_info 108KB 108KB [ 3203.578801] taskstats 100KB 100KB [ 3203.580051] proc_dir_entry 330KB 330KB [ 3203.581240] pde_opener 35KB 35KB [ 3203.582390] seq_file 63KB 63KB [ 3203.583542] sigqueue 129KB 129KB [ 3203.584689] shmem_inode_cache 1220KB 1257KB [ 3203.585841] kernfs_iattrs_cache 227KB 227KB [ 3203.587013] kernfs_node_cache 5191KB 5191KB [ 3203.588177] mnt_cache 133KB 133KB [ 3203.589354] filp 1541KB 1777KB [ 3203.590517] names_cache 10629KB 12512KB [ 3203.591668] hashtab_node 274KB 274KB [ 3203.592813] ebitmap_node 1149KB 1149KB [ 3203.593955] avtab_node 4976KB 4976KB [ 3203.595127] avc_node 31KB 31KB [ 3203.596285] lsm_inode_cache 3300KB 3300KB [ 3203.597424] lsm_file_cache 216KB 216KB [ 3203.598576] key_jar 39KB 39KB [ 3203.599729] uts_namespace 15KB 15KB [ 3203.600887] nsproxy 7KB 7KB [ 3203.602048] vm_area_struct 760KB 960KB [ 3203.603246] fs_cache 52KB 52KB [ 3203.604391] files_cache 136KB 191KB [ 3203.605530] signal_cache 256KB 370KB [ 3203.606661] sighand_cache 330KB 330KB [ 3203.607814] task_struct 1063KB 1233KB [ 3203.608967] cred_jar 89KB 148KB [ 3203.610127] anon_vma_chain 149KB 196KB [ 3203.611284] anon_vma 227KB 227KB [ 3203.612444] pid 63KB 63KB [ 3203.613585] Acpi-Operand 203KB 233KB [ 3203.614738] Acpi-ParseExt 23KB 23KB [ 3203.615889] Acpi-Parse 173KB 189KB [ 3203.617040] Acpi-State 141KB 157KB [ 3203.618190] Acpi-Namespace 24KB 24KB [ 3203.619340] numa_policy 3KB 3KB [ 3203.620498] trace_event_file 176KB 176KB [ 3203.621651] ftrace_event_field 280KB 280KB [ 3203.622826] pool_workqueue 32KB 32KB [ 3203.623957] task_group 16KB 16KB [ 3203.625128] mm_struct 315KB 315KB [ 3203.626276] vmap_area 118KB 118KB [ 3203.627439] page->ptl 189KB 196KB [ 3203.628582] kmemleak_scan_area 143KB 143KB [ 3203.630647] kmemleak_object 138941KB 150409KB [ 3203.631820] kmalloc-8k 4576KB 4736KB [ 3203.632994] kmalloc-4k 6192KB 7328KB [ 3203.634162] kmalloc-2k 3776KB 4288KB [ 3203.635336] kmalloc-1k 2218KB 3232KB [ 3203.636520] kmalloc-512 2779KB 4128KB [ 3203.637666] kmalloc-256 1240KB 1240KB [ 3203.638815] kmalloc-192 552KB 552KB [ 3203.639968] kmalloc-128 455KB 504KB [ 3203.641140] kmalloc-96 342KB 612KB [ 3203.642320] kmalloc-64 944KB 1328KB [ 3203.643489] kmalloc-32 759KB 844KB [ 3203.644654] kmalloc-16 346KB 348KB [ 3203.645798] kmalloc-8 334KB 334KB [ 3203.646949] kmem_cache_node 43KB 43KB [ 3203.648092] kmem_cache 75KB 75KB [ 3203.649265] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=177,uid=0 [ 3203.653490] Out of memory (oom_kill_allocating_task): Killed process 174 (rsyslogd) total-vm:220876kB, anon-rss:984kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 3203.691974] syz-executor.7 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3203.694143] CPU: 0 PID: 291 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 3203.695572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3203.697316] Call Trace: [ 3203.697857] dump_stack+0x107/0x167 [ 3203.698623] dump_header+0x107/0x689 [ 3203.699424] oom_kill_process.cold+0x10/0x15 [ 3203.700339] out_of_memory+0x1149/0x1440 [ 3203.701187] ? oom_killer_disable+0x280/0x280 [ 3203.702109] ? mutex_trylock+0x237/0x2b0 [ 3203.702966] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3203.704219] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3203.705435] ? lock_acquire+0xd7/0x470 [ 3203.706263] ? warn_alloc+0x190/0x190 [ 3203.707084] __alloc_pages_nodemask+0x51d/0x600 [ 3203.708048] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3203.709297] ? find_get_entry+0x2c8/0x740 [ 3203.710176] alloc_pages_current+0x187/0x280 [ 3203.711113] __page_cache_alloc+0x2d2/0x360 [ 3203.712016] pagecache_get_page+0x2c7/0xc80 [ 3203.712918] filemap_fault+0x177d/0x2210 [ 3203.713780] ? read_cache_page_gfp+0x30/0x30 [ 3203.714701] ? replace_page_cache_page+0x1200/0x1200 [ 3203.715765] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3203.716848] ext4_filemap_fault+0x87/0xc0 [ 3203.717711] __do_fault+0x113/0x410 [ 3203.718482] handle_mm_fault+0x1e53/0x3500 [ 3203.719389] ? __pmd_alloc+0x630/0x630 [ 3203.720205] ? vmacache_find+0x55/0x2a0 [ 3203.721021] do_user_addr_fault+0x56e/0xc60 [ 3203.721923] exc_page_fault+0xa2/0x1a0 [ 3203.722774] ? asm_exc_page_fault+0x8/0x30 [ 3203.723659] asm_exc_page_fault+0x1e/0x30 [ 3203.724510] RIP: 0033:0x7f5456ab1688 [ 3203.725278] Code: Unable to access opcode bytes at RIP 0x7f5456ab165e. [ 3203.726629] RSP: 002b:00007ffc021da6b0 EFLAGS: 00010216 [ 3203.727753] RAX: 0000001b2d620000 RBX: 0000000000000471 RCX: 000000000030d7e8 [ 3203.729255] RDX: 000000000030db14 RSI: 00007ffc021da770 RDI: 0000000000000001 [ 3203.730743] RBP: 00007ffc021da70c R08: 0000000000000c81 R09: 00007ffc021f7080 [ 3203.732359] R10: 00007ffc021f7090 R11: 00000000005bc7a2 R12: 0000000000000032 [ 3203.733951] R13: 000000000030d60d R14: 0000000000000013 R15: 00007ffc021da770 [ 3203.735544] Mem-Info: [ 3203.736071] active_anon:11747 inactive_anon:45382 isolated_anon:0 [ 3203.736071] active_file:7 inactive_file:25 isolated_file:0 [ 3203.736071] unevictable:0 dirty:0 writeback:0 [ 3203.736071] slab_reclaimable:8834 slab_unreclaimable:59143 [ 3203.736071] mapped:69634 shmem:116 pagetables:965 bounce:0 [ 3203.736071] free:2741 free_pcp:106 free_cma:0 [ 3203.742494] Node 0 active_anon:46988kB inactive_anon:181528kB active_file:28kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4064kB all_unreclaimable? no [ 3203.747315] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3203.752674] lowmem_reserve[]: 0 1616 1616 1616 [ 3203.753691] Node 0 DMA32 free:4456kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:46988kB inactive_anon:181528kB active_file:28kB inactive_file:100kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3860kB bounce:0kB free_pcp:424kB local_pcp:0kB free_cma:0kB [ 3203.761505] lowmem_reserve[]: 0 0 0 0 [ 3203.762570] Node 0 DMA: 3*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3203.765401] Node 0 DMA32: 460*4kB (UME) 128*8kB (UME) 45*16kB (UME) 17*32kB (M) 7*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4576kB [ 3203.768386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3203.770165] 157 total pagecache pages [ 3203.771008] 0 pages in swap cache [ 3203.771762] Swap cache stats: add 0, delete 0, find 0/0 [ 3203.772911] Free swap = 0kB [ 3203.773575] Total swap = 0kB [ 3203.774210] 524158 pages RAM [ 3203.774868] 0 pages HighMem/MovableOnly [ 3203.775718] 105069 pages reserved [ 3203.776482] Unreclaimable slab info: [ 3203.777296] Name Used Total [ 3203.778460] pid_2 48KB 48KB [ 3203.779610] IEEE-802.15.4-RAW 31KB 31KB [ 3203.780900] fib6_nodes 28KB 28KB [ 3203.782275] ip6_dst_cache 41KB 41KB [ 3203.783692] PINGv6 30KB 30KB [ 3203.784931] RAWv6 154KB 154KB [ 3203.786080] UDPv6 62KB 62KB [ 3203.787253] TCPv6 62KB 62KB [ 3203.788408] scsi_sense_cache 8KB 8KB [ 3203.789556] sd_ext_cdb 3KB 3KB [ 3203.790701] virtio_scsi_cmd 16KB 16KB [ 3203.791855] sgpool-128 119KB 119KB [ 3203.793003] sgpool-64 63KB 63KB [ 3203.794158] sgpool-32 47KB 47KB [ 3203.795317] sgpool-16 52KB 52KB [ 3203.796500] sgpool-8 56KB 56KB [ 3203.797644] io_kiocb 45KB 45KB [ 3203.798804] mqueue_inode_cache 62KB 62KB [ 3203.799954] nfs_commit_data 15KB 15KB [ 3203.801100] nfs_write_data 47KB 47KB [ 3203.802269] jbd2_inode 11KB 11KB [ 3203.803412] ext4_system_zone 3KB 3KB [ 3203.804554] ext4_io_end_vec 7KB 7KB [ 3203.805683] ext4_bio_post_read_ctx 15KB 15KB [ 3203.806930] dnotify_mark 3KB 3KB [ 3203.808067] dnotify_struct 3KB 3KB [ 3203.809250] bio-2 4KB 4KB [ 3203.810395] pid_namespace 7KB 7KB [ 3203.811546] posix_timers_cache 7KB 7KB [ 3203.812715] rpc_buffers 31KB 31KB [ 3203.813874] rpc_tasks 3KB 3KB [ 3203.815018] UNIX 222KB 352KB [ 3203.816168] tcp_bind_bucket 4KB 4KB [ 3203.817329] ip_fib_trie 8KB 8KB [ 3203.818474] ip_fib_alias 15KB 15KB [ 3203.819626] ip_dst_cache 8KB 8KB [ 3203.820793] PING 62KB 62KB [ 3203.821944] RAW 61KB 61KB [ 3203.823129] UDP 190KB 283KB [ 3203.824291] request_sock_TCP 7KB 7KB [ 3203.825432] TCP 60KB 60KB [ 3203.826563] hugetlbfs_inode_cache 30KB 30KB [ 3203.827788] bio-1 11KB 11KB [ 3203.828944] eventpoll_pwq 23KB 23KB [ 3203.830073] eventpoll_epi 43KB 43KB [ 3203.831244] inotify_inode_mark 105KB 105KB [ 3203.832410] request_queue 60KB 60KB [ 3203.833545] blkdev_ioc 18KB 18KB [ 3203.834698] bio-0 144KB 144KB [ 3203.835876] biovec-max 1993KB 1993KB [ 3203.837042] biovec-64 110KB 189KB [ 3203.838259] biovec-16 67KB 67KB [ 3203.839412] uid_cache 8KB 8KB [ 3203.840543] dmaengine-unmap-2 4KB 4KB [ 3203.841682] audit_buffer 7KB 7KB [ 3203.842837] skbuff_fclone_cache 90KB 90KB [ 3203.844012] skbuff_head_cache 405KB 405KB [ 3203.845173] file_lock_cache 74KB 74KB [ 3203.846327] file_lock_ctx 7KB 7KB [ 3203.847502] fsnotify_mark_connector 36KB 36KB [ 3203.848963] net_namespace 86KB 86KB [ 3203.850116] task_delay_info 108KB 108KB [ 3203.851278] taskstats 100KB 100KB [ 3203.852423] proc_dir_entry 330KB 330KB [ 3203.853572] pde_opener 35KB 35KB [ 3203.854707] seq_file 63KB 63KB [ 3203.855865] sigqueue 129KB 129KB [ 3203.857004] shmem_inode_cache 1220KB 1257KB [ 3203.858177] kernfs_iattrs_cache 227KB 227KB [ 3203.859361] kernfs_node_cache 5191KB 5191KB [ 3203.860504] mnt_cache 133KB 133KB [ 3203.861668] filp 1541KB 1777KB [ 3203.862843] names_cache 10629KB 12512KB [ 3203.863976] hashtab_node 274KB 274KB [ 3203.865132] ebitmap_node 1149KB 1149KB [ 3203.866367] avtab_node 4976KB 4976KB [ 3203.867532] avc_node 31KB 31KB [ 3203.868677] lsm_inode_cache 3300KB 3300KB [ 3203.869825] lsm_file_cache 216KB 216KB [ 3203.870978] key_jar 39KB 39KB [ 3203.872112] uts_namespace 15KB 15KB [ 3203.873278] nsproxy 7KB 7KB [ 3203.874517] vm_area_struct 760KB 960KB [ 3203.875680] fs_cache 52KB 52KB [ 3203.876821] files_cache 136KB 191KB [ 3203.877999] signal_cache 256KB 370KB [ 3203.879175] sighand_cache 330KB 330KB [ 3203.880317] task_struct 1063KB 1233KB [ 3203.881466] cred_jar 89KB 148KB [ 3203.882643] anon_vma_chain 149KB 196KB [ 3203.884010] anon_vma 227KB 227KB [ 3203.885419] pid 63KB 63KB [ 3203.886806] Acpi-Operand 203KB 233KB [ 3203.887972] Acpi-ParseExt 23KB 23KB [ 3203.889131] Acpi-Parse 173KB 189KB [ 3203.890307] Acpi-State 141KB 157KB [ 3203.891492] Acpi-Namespace 24KB 24KB [ 3203.892663] numa_policy 3KB 3KB [ 3203.893806] trace_event_file 176KB 176KB [ 3203.894944] ftrace_event_field 280KB 280KB [ 3203.896098] pool_workqueue 32KB 32KB [ 3203.897252] task_group 16KB 16KB [ 3203.898377] mm_struct 315KB 315KB [ 3203.899514] vmap_area 118KB 118KB [ 3203.900631] page->ptl 189KB 196KB [ 3203.901763] kmemleak_scan_area 143KB 143KB [ 3203.903100] kmemleak_object 139056KB 150409KB [ 3203.904268] kmalloc-8k 4576KB 4736KB [ 3203.905421] kmalloc-4k 6192KB 7328KB [ 3203.906546] kmalloc-2k 3776KB 4288KB [ 3203.907688] kmalloc-1k 2218KB 3232KB [ 3203.908827] kmalloc-512 2854KB 4128KB [ 3203.909969] kmalloc-256 1240KB 1240KB [ 3203.911103] kmalloc-192 552KB 552KB [ 3203.912259] kmalloc-128 455KB 504KB [ 3203.913433] kmalloc-96 345KB 612KB [ 3203.914619] kmalloc-64 955KB 1328KB [ 3203.915799] kmalloc-32 759KB 844KB [ 3203.916980] kmalloc-16 346KB 348KB [ 3203.918173] kmalloc-8 334KB 334KB [ 3203.919366] kmem_cache_node 43KB 43KB [ 3203.920500] kmem_cache 75KB 75KB [ 3203.921673] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=291,uid=0 [ 3203.924699] Out of memory (oom_kill_allocating_task): Killed process 291 (syz-executor.7) total-vm:93280kB, anon-rss:384kB, file-rss:34572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 3204.515605] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3204.517070] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.252 #1 [ 3204.517975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3204.519193] Call Trace: [ 3204.519586] dump_stack+0x107/0x167 [ 3204.520120] dump_header+0x107/0x689 [ 3204.520713] oom_kill_process.cold+0x10/0x15 [ 3204.521400] out_of_memory+0x358/0x1440 [ 3204.521986] ? oom_killer_disable+0x280/0x280 [ 3204.522668] ? mutex_trylock+0x237/0x2b0 [ 3204.523274] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3204.524182] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3204.525041] ? lock_acquire+0xd7/0x470 [ 3204.525649] ? warn_alloc+0x190/0x190 [ 3204.526233] __alloc_pages_nodemask+0x51d/0x600 [ 3204.526950] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3204.527826] ? find_get_entry+0x2c8/0x740 [ 3204.528477] alloc_pages_current+0x187/0x280 [ 3204.529113] __page_cache_alloc+0x2d2/0x360 [ 3204.529750] pagecache_get_page+0x2c7/0xc80 [ 3204.530377] filemap_fault+0x177d/0x2210 [ 3204.530990] ? read_cache_page_gfp+0x30/0x30 [ 3204.531664] ? replace_page_cache_page+0x1200/0x1200 [ 3204.532422] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3204.533237] ext4_filemap_fault+0x87/0xc0 [ 3204.533841] __do_fault+0x113/0x410 [ 3204.534396] handle_mm_fault+0x1e53/0x3500 [ 3204.535037] ? find_held_lock+0x2c/0x110 [ 3204.535627] ? __pmd_alloc+0x630/0x630 [ 3204.536221] ? vmacache_find+0x55/0x2a0 [ 3204.536844] do_user_addr_fault+0x56e/0xc60 [ 3204.537477] exc_page_fault+0xa2/0x1a0 [ 3204.538061] ? asm_exc_page_fault+0x8/0x30 [ 3204.538689] asm_exc_page_fault+0x1e/0x30 [ 3204.539305] RIP: 0033:0x7f2b642fcb20 [ 3204.539862] Code: Unable to access opcode bytes at RIP 0x7f2b642fcaf6. [ 3204.540812] RSP: 002b:00007ffd491bff58 EFLAGS: 00010293 [ 3204.541600] RAX: 0000000000000007 RBX: 0000559bbcd3ab40 RCX: 00007f2b64335116 [ 3204.542636] RDX: 000000000000002d RSI: 00007ffd491bff60 RDI: 0000000000000000 [ 3204.543664] RBP: 00007ffd491bff60 R08: 0000000000000000 R09: 22387e44992944de [ 3204.544704] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000559bbcd3ac88 [ 3204.545733] R13: 000000000000002d R14: 0000000000000000 R15: 0000559bb0bc7b4e [ 3204.546811] Mem-Info: [ 3204.547193] active_anon:11746 inactive_anon:45023 isolated_anon:0 [ 3204.547193] active_file:17 inactive_file:16 isolated_file:0 [ 3204.547193] unevictable:0 dirty:0 writeback:0 [ 3204.547193] slab_reclaimable:8834 slab_unreclaimable:59085 [ 3204.547193] mapped:69641 shmem:116 pagetables:924 bounce:0 [ 3204.547193] free:2864 free_pcp:116 free_cma:0 [ 3204.551665] Node 0 active_anon:46984kB inactive_anon:180092kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278564kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:3936kB all_unreclaimable? yes [ 3204.554950] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3204.558608] lowmem_reserve[]: 0 1616 1616 1616 [ 3204.559313] Node 0 DMA32 free:4948kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:46984kB inactive_anon:180092kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3696kB bounce:0kB free_pcp:464kB local_pcp:244kB free_cma:0kB [ 3204.563389] lowmem_reserve[]: 0 0 0 0 [ 3204.563955] Node 0 DMA: 3*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3204.565865] Node 0 DMA32: 502*4kB (UME) 133*8kB (UME) 39*16kB (ME) 31*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4944kB [ 3204.567926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3204.569147] 185 total pagecache pages [ 3204.569706] 0 pages in swap cache [ 3204.570186] Swap cache stats: add 0, delete 0, find 0/0 [ 3204.570959] Free swap = 0kB [ 3204.571407] Total swap = 0kB [ 3204.571833] 524158 pages RAM [ 3204.572275] 0 pages HighMem/MovableOnly [ 3204.572826] 105069 pages reserved [ 3204.573325] Unreclaimable slab info: [ 3204.573842] Name Used Total [ 3204.574637] pid_2 48KB 48KB [ 3204.575417] IEEE-802.15.4-RAW 31KB 31KB [ 3204.576159] fib6_nodes 28KB 28KB [ 3204.576937] ip6_dst_cache 41KB 41KB [ 3204.577701] PINGv6 30KB 30KB [ 3204.578909] RAWv6 154KB 154KB [ 3204.579743] UDPv6 62KB 62KB [ 3204.580515] TCPv6 62KB 62KB [ 3204.581279] scsi_sense_cache 8KB 8KB [ 3204.582028] sd_ext_cdb 3KB 3KB [ 3204.582793] virtio_scsi_cmd 16KB 16KB [ 3204.583569] sgpool-128 119KB 119KB [ 3204.584321] sgpool-64 63KB 63KB [ 3204.585070] sgpool-32 47KB 47KB [ 3204.585831] sgpool-16 52KB 52KB [ 3204.586591] sgpool-8 56KB 56KB [ 3204.587362] io_kiocb 45KB 45KB [ 3204.588102] mqueue_inode_cache 62KB 62KB [ 3204.588870] nfs_commit_data 15KB 15KB [ 3204.589627] nfs_write_data 47KB 47KB [ 3204.590396] jbd2_inode 11KB 11KB [ 3204.591149] ext4_system_zone 3KB 3KB [ 3204.591903] ext4_io_end_vec 7KB 7KB [ 3204.592665] ext4_bio_post_read_ctx 15KB 15KB [ 3204.593482] dnotify_mark 3KB 3KB [ 3204.594236] dnotify_struct 3KB 3KB [ 3204.594975] bio-2 4KB 4KB [ 3204.595735] pid_namespace 7KB 7KB [ 3204.596481] posix_timers_cache 7KB 7KB [ 3204.597251] rpc_buffers 31KB 31KB [ 3204.598046] rpc_tasks 3KB 3KB [ 3204.598811] UNIX 222KB 352KB [ 3204.599566] tcp_bind_bucket 4KB 4KB [ 3204.600324] ip_fib_trie 8KB 8KB [ 3204.601052] ip_fib_alias 15KB 15KB [ 3204.601815] ip_dst_cache 8KB 8KB [ 3204.602570] PING 62KB 62KB [ 3204.603331] RAW 61KB 61KB [ 3204.604057] UDP 190KB 283KB [ 3204.604801] request_sock_TCP 7KB 7KB [ 3204.605561] TCP 60KB 60KB [ 3204.606325] hugetlbfs_inode_cache 30KB 30KB [ 3204.607108] bio-1 11KB 11KB [ 3204.607856] eventpoll_pwq 23KB 23KB [ 3204.608600] eventpoll_epi 43KB 43KB [ 3204.609351] inotify_inode_mark 105KB 105KB [ 3204.610090] request_queue 60KB 60KB [ 3204.610837] blkdev_ioc 18KB 18KB [ 3204.611580] bio-0 144KB 144KB [ 3204.612342] biovec-max 1993KB 1993KB [ 3204.613063] biovec-64 110KB 189KB [ 3204.613811] biovec-16 67KB 67KB [ 3204.614558] uid_cache 8KB 8KB [ 3204.615317] dmaengine-unmap-2 4KB 4KB [ 3204.616041] audit_buffer 7KB 7KB [ 3204.616785] skbuff_fclone_cache 90KB 90KB [ 3204.617559] skbuff_head_cache 465KB 465KB [ 3204.618298] file_lock_cache 74KB 74KB [ 3204.619025] file_lock_ctx 7KB 7KB [ 3204.619779] fsnotify_mark_connector 36KB 36KB [ 3204.620587] net_namespace 86KB 86KB [ 3204.621324] task_delay_info 108KB 108KB [ 3204.622048] taskstats 100KB 100KB [ 3204.622801] proc_dir_entry 330KB 330KB [ 3204.623537] pde_opener 35KB 35KB [ 3204.624281] seq_file 63KB 63KB [ 3204.624993] sigqueue 129KB 129KB [ 3204.625737] shmem_inode_cache 1219KB 1257KB [ 3204.626467] kernfs_iattrs_cache 227KB 227KB [ 3204.627233] kernfs_node_cache 5191KB 5191KB [ 3204.627951] mnt_cache 133KB 133KB [ 3204.628719] filp 1532KB 1770KB [ 3204.629469] names_cache 10289KB 12333KB [ 3204.630194] hashtab_node 274KB 274KB [ 3204.630932] ebitmap_node 1149KB 1149KB [ 3204.631659] avtab_node 4976KB 4976KB [ 3204.632388] avc_node 31KB 31KB [ 3204.633109] lsm_inode_cache 3300KB 3300KB [ 3204.633845] lsm_file_cache 216KB 216KB [ 3204.634580] key_jar 39KB 39KB [ 3204.635312] uts_namespace 15KB 15KB [ 3204.636024] nsproxy 7KB 7KB [ 3204.636775] vm_area_struct 760KB 960KB [ 3204.637525] fs_cache 52KB 52KB [ 3204.638274] files_cache 136KB 191KB [ 3204.639022] signal_cache 256KB 370KB [ 3204.639760] sighand_cache 330KB 330KB [ 3204.640519] task_struct 1063KB 1233KB [ 3204.641245] cred_jar 89KB 148KB [ 3204.641952] anon_vma_chain 147KB 196KB [ 3204.642682] anon_vma 227KB 227KB [ 3204.643427] pid 63KB 63KB [ 3204.644128] Acpi-Operand 203KB 233KB [ 3204.644863] Acpi-ParseExt 23KB 23KB [ 3204.645586] Acpi-Parse 173KB 189KB [ 3204.646307] Acpi-State 141KB 157KB [ 3204.647012] Acpi-Namespace 24KB 24KB [ 3204.647734] numa_policy 3KB 3KB [ 3204.648469] trace_event_file 176KB 176KB [ 3204.649166] ftrace_event_field 280KB 280KB [ 3204.649897] pool_workqueue 32KB 32KB [ 3204.650615] task_group 16KB 16KB [ 3204.651354] mm_struct 315KB 315KB [ 3204.652063] vmap_area 118KB 118KB [ 3204.652788] page->ptl 189KB 196KB [ 3204.653513] kmemleak_scan_area 143KB 143KB [ 3204.654943] kmemleak_object 139067KB 150409KB [ 3204.655674] kmalloc-8k 4576KB 4736KB [ 3204.656403] kmalloc-4k 6152KB 7328KB [ 3204.657101] kmalloc-2k 3740KB 4288KB [ 3204.657835] kmalloc-1k 2218KB 3232KB [ 3204.658571] kmalloc-512 3042KB 4080KB [ 3204.659291] kmalloc-256 1240KB 1240KB [ 3204.659983] kmalloc-192 552KB 552KB [ 3204.660699] kmalloc-128 455KB 504KB [ 3204.661427] kmalloc-96 356KB 612KB [ 3204.662139] kmalloc-64 959KB 1324KB [ 3204.662874] kmalloc-32 759KB 844KB [ 3204.663594] kmalloc-16 346KB 348KB [ 3204.664307] kmalloc-8 334KB 334KB [ 3204.665002] kmem_cache_node 43KB 43KB [ 3204.665712] kmem_cache 75KB 75KB [ 3204.666429] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=14741,uid=0 [ 3204.668388] Out of memory: Killed process 14742 (syz-executor.5) total-vm:94072kB, anon-rss:464kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 3205.168154] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 3205.170907] CPU: 1 PID: 103 Comm: systemd-journal Not tainted 5.10.252 #1 [ 3205.172653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3205.174725] Call Trace: [ 3205.175435] dump_stack+0x107/0x167 [ 3205.176376] dump_header+0x107/0x689 [ 3205.177338] oom_kill_process.cold+0x10/0x15 [ 3205.178475] out_of_memory+0x1149/0x1440 [ 3205.179548] ? oom_killer_disable+0x280/0x280 [ 3205.180710] ? mutex_trylock+0x237/0x2b0 [ 3205.181754] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3205.183293] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3205.184810] ? lock_acquire+0xd7/0x470 [ 3205.185815] ? warn_alloc+0x190/0x190 [ 3205.186832] __alloc_pages_nodemask+0x51d/0x600 [ 3205.188030] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3205.189589] ? find_get_entry+0x2c8/0x740 [ 3205.190668] alloc_pages_current+0x187/0x280 [ 3205.191818] __page_cache_alloc+0x2d2/0x360 [ 3205.192932] pagecache_get_page+0x2c7/0xc80 [ 3205.194055] filemap_fault+0x177d/0x2210 [ 3205.195129] ? read_cache_page_gfp+0x30/0x30 [ 3205.196313] ? replace_page_cache_page+0x1200/0x1200 [ 3205.197629] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3205.199009] ext4_filemap_fault+0x87/0xc0 [ 3205.200073] __do_fault+0x113/0x410 [ 3205.201015] handle_mm_fault+0x1e53/0x3500 [ 3205.202129] ? __pmd_alloc+0x630/0x630 [ 3205.203153] ? vmacache_find+0x55/0x2a0 [ 3205.204175] ? vmacache_update+0xce/0x140 [ 3205.205253] do_user_addr_fault+0x56e/0xc60 [ 3205.206386] exc_page_fault+0xa2/0x1a0 [ 3205.207400] ? asm_exc_page_fault+0x8/0x30 [ 3205.208486] asm_exc_page_fault+0x1e/0x30 [ 3205.209548] RIP: 0033:0x7f7690243116 [ 3205.210506] Code: Unable to access opcode bytes at RIP 0x7f76902430ec. [ 3205.212204] RSP: 002b:00007ffc97baea30 EFLAGS: 00010293 [ 3205.213570] RAX: 0000000000000001 RBX: 000055997b837360 RCX: 00007f7690243116 [ 3205.215419] RDX: 0000000000000014 RSI: 000055997b83d8e0 RDI: 0000000000000008 [ 3205.217245] RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007ffc97bdb080 [ 3205.219085] R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 [ 3205.220913] R13: 0000000000000014 R14: 0000000000000000 R15: 0000000000000000 [ 3205.223570] Mem-Info: [ 3205.223992] active_anon:11746 inactive_anon:45023 isolated_anon:0 [ 3205.223992] active_file:9 inactive_file:32 isolated_file:0 [ 3205.223992] unevictable:0 dirty:0 writeback:0 [ 3205.223992] slab_reclaimable:8834 slab_unreclaimable:59112 [ 3205.223992] mapped:69634 shmem:116 pagetables:924 bounce:0 [ 3205.223992] free:2543 free_pcp:114 free_cma:0 [ 3205.227489] syz-executor.7: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 3205.228723] Node 0 active_anon:46984kB inactive_anon:180092kB active_file:36kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:3936kB all_unreclaimable? yes [ 3205.228732] ,cpuset= [ 3205.229811] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3205.229921] lowmem_reserve[]: 0 1616 1616 1616 [ 3205.229953] Node 0 DMA32 free:3684kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:46984kB inactive_anon:180092kB active_file:36kB inactive_file:128kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3696kB bounce:0kB free_pcp:456kB local_pcp:224kB free_cma:0kB [ 3205.235172] syz7 [ 3205.235354] lowmem_reserve[]: 0 0 0 0 [ 3205.235385] Node 0 DMA: 0*4kB [ 3205.240955] ,mems_allowed=0 [ 3205.241473] 1*8kB (U) 1*16kB [ 3205.247543] [ 3205.247756] (U) 0*32kB [ 3205.248599] CPU: 0 PID: 14735 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 3205.248933] 1*64kB (U) [ 3205.249557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3205.249568] Call Trace: [ 3205.249918] 0*128kB 1*256kB [ 3205.250287] dump_stack+0x107/0x167 [ 3205.250314] warn_alloc.cold+0x95/0x18a [ 3205.250590] (U) 0*512kB [ 3205.252066] ? zone_watermark_ok_safe+0x260/0x260 [ 3205.252090] ? schedule_timeout+0x1ce/0x380 [ 3205.252379] 0*1024kB [ 3205.254130] ? usleep_range+0x170/0x170 [ 3205.254152] ? __next_timer_interrupt+0x2c0/0x2c0 [ 3205.254450] 1*2048kB [ 3205.255079] ? 0xffffffff81000000 [ 3205.255490] (M) [ 3205.256333] __alloc_pages_slowpath.constprop.0+0x1dd3/0x2320 [ 3205.256624] 1*4096kB (M) [ 3205.257665] ? lock_acquire+0xd7/0x470 [ 3205.258132] = 6488kB [ 3205.258142] Node 0 [ 3205.258662] ? warn_alloc+0x190/0x190 [ 3205.258705] __alloc_pages_nodemask+0x51d/0x600 [ 3205.259120] DMA32: 451*4kB [ 3205.260150] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3205.260173] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3205.260451] (UME) [ 3205.261174] ? policy_node+0x14/0x140 [ 3205.261395] 109*8kB [ 3205.262615] ? __sanitizer_cov_trace_pc+0x42/0x60 [ 3205.262643] alloc_pages_current+0x187/0x280 [ 3205.262940] (UME) 29*16kB [ 3205.263774] relay_open_buf.part.0+0x2a5/0xc00 [ 3205.263807] relay_open+0x531/0xa10 [ 3205.264041] (UME) 17*32kB [ 3205.264543] do_blk_trace_setup+0x4cf/0xc10 [ 3205.264567] ? _copy_from_user+0xfb/0x1b0 [ 3205.264977] (UM) 0*64kB [ 3205.265973] __blk_trace_setup+0xca/0x180 [ 3205.265993] ? do_blk_trace_setup+0xc10/0xc10 [ 3205.266321] 0*128kB [ 3205.267482] blk_trace_ioctl+0x155/0x290 [ 3205.268142] 0*256kB 0*512kB [ 3205.268612] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 3205.268634] ? do_vfs_ioctl+0x283/0x10d0 [ 3205.269048] 0*1024kB 0*2048kB [ 3205.269560] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3205.269581] ? generic_block_fiemap+0x60/0x60 [ 3205.270114] 0*4096kB = 3684kB [ 3205.271058] ? lock_downgrade+0x6d0/0x6d0 [ 3205.271087] blkdev_ioctl+0xc1/0x710 [ 3205.271406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3205.272355] ? blkdev_common_ioctl+0x1930/0x1930 [ 3205.272380] ? selinux_file_ioctl+0xb6/0x270 [ 3205.272771] 157 total pagecache pages [ 3205.272781] 0 pages in swap cache [ 3205.273394] block_ioctl+0xf9/0x140 [ 3205.273416] ? blkdev_read_iter+0x1c0/0x1c0 [ 3205.273887] Swap cache stats: add 0, delete 0, find 0/0 [ 3205.273897] Free swap = 0kB [ 3205.274787] __x64_sys_ioctl+0x19a/0x210 [ 3205.274810] do_syscall_64+0x33/0x40 [ 3205.275097] Total swap = 0kB [ 3205.275107] 524158 pages RAM [ 3205.275981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3205.275995] RIP: 0033:0x7f5456b04b19 [ 3205.276505] 0 pages HighMem/MovableOnly [ 3205.276995] Code: Unable to access opcode bytes at RIP 0x7f5456b04aef. [ 3205.277447] 105069 pages reserved [ 3205.278073] RSP: 002b:00007f545407a188 EFLAGS: 00000246 [ 3205.278630] Unreclaimable slab info: [ 3205.279481] ORIG_RAX: 0000000000000010 [ 3205.279494] RAX: ffffffffffffffda RBX: 00007f5456c17f60 RCX: 00007f5456b04b19 [ 3205.279510] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 3205.279878] Name Used Total [ 3205.280977] RBP: 00007f5456b5ef6d R08: 0000000000000000 R09: 0000000000000000 [ 3205.280987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3205.281002] R13: 00007ffc021da45f R14: 00007f545407a300 R15: 0000000000022000 [ 3205.281518] pid_2 48KB 48KB [ 3205.282718] Mem-Info: [ 3205.283085] IEEE-802.15.4-RAW 31KB 31KB [ 3205.284909] active_anon:11746 inactive_anon:45023 isolated_anon:0 [ 3205.284909] active_file:9 inactive_file:32 isolated_file:0 [ 3205.284909] unevictable:0 dirty:0 writeback:0 [ 3205.284909] slab_reclaimable:8834 slab_unreclaimable:59112 [ 3205.284909] mapped:69634 shmem:116 pagetables:924 bounce:0 [ 3205.284909] free:2543 free_pcp:114 free_cma:0 [ 3205.285417] fib6_nodes 28KB 28KB [ 3205.285424] ip6_dst_cache 41KB 41KB [ 3205.285437] PINGv6 30KB 30KB [ 3205.286400] Node 0 active_anon:46984kB inactive_anon:180092kB active_file:36kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:3936kB all_unreclaimable? yes [ 3205.286802] RAWv6 154KB 154KB [ 3205.286813] UDPv6 62KB 62KB [ 3205.287558] Node 0 [ 3205.287964] TCPv6 62KB 62KB [ 3205.288915] DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3205.289488] scsi_sense_cache 8KB 8KB [ 3205.289503] sd_ext_cdb 3KB 3KB [ 3205.290136] lowmem_reserve[]: [ 3205.290608] virtio_scsi_cmd 16KB 16KB [ 3205.290621] sgpool-128 119KB 119KB [ 3205.290634] sgpool-64 63KB 63KB [ 3205.291433] 0 [ 3205.291772] sgpool-32 47KB 47KB [ 3205.292424] 1616 [ 3205.292995] sgpool-16 52KB 52KB [ 3205.293007] sgpool-8 56KB 56KB [ 3205.293807] 1616 [ 3205.294256] io_kiocb 45KB 45KB [ 3205.294263] mqueue_inode_cache 62KB 62KB [ 3205.294276] nfs_commit_data 15KB 15KB [ 3205.295689] 1616 [ 3205.296073] nfs_write_data 47KB 47KB [ 3205.297210] [ 3205.297625] jbd2_inode 11KB 11KB [ 3205.298462] Node 0 [ 3205.299287] ext4_system_zone 3KB 3KB [ 3205.299294] ext4_io_end_vec 7KB 7KB [ 3205.299307] ext4_bio_post_read_ctx 15KB 15KB [ 3205.300864] DMA32 free:3684kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:46984kB inactive_anon:180092kB active_file:36kB inactive_file:128kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3696kB bounce:0kB free_pcp:456kB local_pcp:232kB free_cma:0kB [ 3205.301458] dnotify_mark 3KB 3KB [ 3205.301465] dnotify_struct 3KB 3KB [ 3205.301477] bio-2 4KB 4KB [ 3205.303013] lowmem_reserve[]: [ 3205.303831] pid_namespace 7KB 7KB [ 3205.303838] posix_timers_cache 7KB 7KB [ 3205.303851] rpc_buffers 31KB 31KB [ 3205.305374] 0 [ 3205.305976] rpc_tasks 3KB 3KB [ 3205.306505] 0 [ 3205.307113] UNIX 222KB 352KB [ 3205.313674] 0 [ 3205.314267] tcp_bind_bucket 4KB 4KB [ 3205.314276] ip_fib_trie 8KB 8KB [ 3205.314290] ip_fib_alias 15KB 15KB [ 3205.315454] 0 [ 3205.316034] ip_dst_cache 8KB 8KB [ 3205.316049] PING 62KB 62KB [ 3205.320945] [ 3205.321543] RAW 61KB 61KB [ 3205.321550] UDP 190KB 283KB [ 3205.321558] request_sock_TCP 7KB 7KB [ 3205.321572] TCP 60KB 60KB [ 3205.322720] Node 0 [ 3205.322968] hugetlbfs_inode_cache 30KB 30KB [ 3205.324124] DMA: [ 3205.326995] bio-1 11KB 11KB [ 3205.327002] eventpoll_pwq 23KB 23KB [ 3205.327010] eventpoll_epi 43KB 43KB [ 3205.327024] inotify_inode_mark 105KB 105KB [ 3205.328375] 0*4kB [ 3205.328944] request_queue 60KB 60KB [ 3205.328958] blkdev_ioc 18KB 18KB [ 3205.329651] 1*8kB [ 3205.330248] bio-0 144KB 144KB [ 3205.330255] biovec-max 1993KB 1993KB [ 3205.330272] biovec-64 110KB 189KB [ 3205.331430] (U) [ 3205.332016] biovec-16 67KB 67KB [ 3205.332030] uid_cache 8KB 8KB [ 3205.332452] 1*16kB [ 3205.333038] dmaengine-unmap-2 4KB 4KB [ 3205.333513] (U) [ 3205.334093] audit_buffer 7KB 7KB [ 3205.334107] skbuff_fclone_cache 90KB 90KB [ 3205.335274] 0*32kB [ 3205.335486] skbuff_head_cache 525KB 525KB [ 3205.335500] file_lock_cache 74KB 74KB [ 3205.336655] 1*64kB [ 3205.337257] file_lock_ctx 7KB 7KB [ 3205.337265] fsnotify_mark_connector 36KB 36KB [ 3205.337272] net_namespace 86KB 86KB [ 3205.337286] task_delay_info 108KB 108KB [ 3205.338434] (U) [ 3205.338661] taskstats 100KB 100KB [ 3205.339825] 0*128kB [ 3205.339990] proc_dir_entry 330KB 330KB [ 3205.340004] pde_opener 35KB 35KB [ 3205.341154] 1*256kB [ 3205.341401] seq_file 63KB 63KB [ 3205.341408] sigqueue 129KB 129KB [ 3205.341415] shmem_inode_cache 1219KB 1257KB [ 3205.341428] kernfs_iattrs_cache 227KB 227KB [ 3205.342583] (U) [ 3205.343173] kernfs_node_cache 5191KB 5191KB [ 3205.343188] mnt_cache 133KB 133KB [ 3205.344672] 0*512kB [ 3205.347822] filp 1532KB 1770KB [ 3205.347850] names_cache 10289KB 12333KB [ 3205.349247] 0*1024kB [ 3205.349810] hashtab_node 274KB 274KB [ 3205.351004] 1*2048kB [ 3205.351356] ebitmap_node 1149KB 1149KB [ 3205.351363] avtab_node 4976KB 4976KB [ 3205.351376] avc_node 31KB 31KB [ 3205.352544] (M) [ 3205.353171] lsm_inode_cache 3300KB 3300KB [ 3205.354338] 1*4096kB [ 3205.354541] lsm_file_cache 216KB 216KB [ 3205.354552] key_jar 39KB 39KB [ 3205.355734] (M) [ 3205.355938] uts_namespace 15KB 15KB [ 3205.357103] = 6488kB [ 3205.357316] nsproxy 7KB 7KB [ 3205.357342] vm_area_struct 760KB 960KB [ 3205.358496] Node 0 [ 3205.359128] fs_cache 52KB 52KB [ 3205.360296] DMA32: [ 3205.360503] files_cache 136KB 191KB [ 3205.361674] 451*4kB [ 3205.362297] signal_cache 256KB 370KB [ 3205.362311] sighand_cache 330KB 330KB [ 3205.362660] (UME) [ 3205.363283] task_struct 1063KB 1233KB [ 3205.363298] cred_jar 89KB 148KB [ 3205.364466] 109*8kB [ 3205.365076] anon_vma_chain 147KB 196KB [ 3205.366238] (UME) [ 3205.366492] anon_vma 227KB 227KB [ 3205.367738] 29*16kB [ 3205.367972] pid 63KB 63KB [ 3205.369147] (UME) [ 3205.369769] Acpi-Operand 203KB 233KB [ 3205.369776] Acpi-ParseExt 23KB 23KB [ 3205.369789] Acpi-Parse 173KB 189KB [ 3205.370968] 17*32kB [ 3205.371598] Acpi-State 141KB 157KB [ 3205.371605] Acpi-Namespace 24KB 24KB [ 3205.371618] numa_policy 3KB 3KB [ 3205.372082] (UM) [ 3205.372719] trace_event_file 176KB 176KB [ 3205.372727] ftrace_event_field 280KB 280KB [ 3205.372739] pool_workqueue 32KB 32KB [ 3205.373901] 0*64kB [ 3205.374145] task_group 16KB 16KB [ 3205.375329] 0*128kB [ 3205.375939] mm_struct 315KB 315KB [ 3205.377119] 0*256kB [ 3205.377351] vmap_area 118KB 118KB [ 3205.377359] page->ptl 189KB 196KB [ 3205.377371] kmemleak_scan_area 143KB 143KB [ 3205.378533] 0*512kB [ 3205.379890] kmemleak_object 139344KB 150409KB [ 3205.380820] 0*1024kB [ 3205.381049] kmalloc-8k 4576KB 4736KB [ 3205.382233] 0*2048kB [ 3205.382878] kmalloc-4k 6152KB 7328KB [ 3205.383369] 0*4096kB [ 3205.383983] kmalloc-2k 3740KB 4288KB [ 3205.385144] = 3684kB [ 3205.385418] kmalloc-1k 2218KB 3232KB [ 3205.385443] kmalloc-512 3231KB 4080KB [ 3205.386610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3205.387293] kmalloc-256 1240KB 1240KB [ 3205.387301] kmalloc-192 552KB 552KB [ 3205.387314] kmalloc-128 455KB 504KB [ 3205.388483] 157 total pagecache pages [ 3205.389106] kmalloc-96 366KB 612KB [ 3205.389551] 0 pages in swap cache [ 3205.390174] kmalloc-64 977KB 1324KB [ 3205.390685] Swap cache stats: add 0, delete 0, find 0/0 [ 3205.391318] kmalloc-32 759KB 844KB [ 3205.391330] kmalloc-16 346KB 348KB [ 3205.392499] Free swap = 0kB [ 3205.392764] kmalloc-8 334KB 334KB [ 3205.393929] Total swap = 0kB [ 3205.394552] kmem_cache_node 43KB 43KB [ 3205.394560] kmem_cache 75KB 75KB [ 3205.394573] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null) [ 3205.395745] 524158 pages RAM [ 3205.396383] ,cpuset= [ 3205.396826] 0 pages HighMem/MovableOnly [ 3205.396835] 105069 pages reserved [ 3205.441920] /,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=103,uid=0 [ 3205.443836] Out of memory (oom_kill_allocating_task): Killed process 103 (systemd-journal) total-vm:40140kB, anon-rss:888kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:108kB oom_score_adj:-250 [ 3205.532366] systemd[1]: rsyslog.service: A process of this unit has been killed by the OOM killer. [ 3205.536229] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 3205.538533] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 3205.551994] systemd[1]: systemd-journald.service: Consumed 9.049s CPU time. [ 3205.556112] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 3205.557974] systemd[1]: rsyslog.service: Failed with result 'oom-kill'. [ 3205.576148] systemd[1]: rsyslog.service: Consumed 1.691s CPU time. [ 3205.587854] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 3205.621802] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3205.800764] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 1. [ 3205.802660] systemd[1]: Stopped System Logging Service. [ 3205.804367] systemd[1]: rsyslog.service: Consumed 1.691s CPU time. [ 3206.343388] systemd[1]: Starting System Logging Service... [ 3206.370945] syz-executor.6 (288) used greatest stack depth: 24160 bytes left [ 3206.424332] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 3206.586968] journalctl (14795) used greatest stack depth: 23888 bytes left [ 3206.598224] systemd[1]: systemd-journal-flush.service: Succeeded. [ 3206.615431] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3206.617835] systemd[1]: Stopped Journal Service. [ 3206.623415] systemd[1]: systemd-journald.service: Consumed 9.049s CPU time. [ 3206.675264] systemd[1]: Starting Journal Service... [ 3206.866033] systemd[1]: Started Load/Save RF Kill Switch Status. [ 3206.891591] systemd[1]: Started System Logging Service. [ 3207.007614] systemd-journald[14807]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3207.916596] systemd[1]: Started Journal Service. [ 3208.028771] systemd-journald[14807]: Received client request to flush runtime journal. 19:41:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 70) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 60) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:02 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:41:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 66) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 95) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:02 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r3, 0x0, 0x10000000c) dup2(r4, 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000680)={{r1}, 0x0, 0x0, @unused=[0x7ff, 0x4, 0xff, 0x8000000000000000], @devid}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:41:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x2}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:41:02 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10) copy_file_range(r2, &(0x7f00000001c0)=0x9, 0xffffffffffffffff, &(0x7f0000000400)=0x2e41, 0xffffffffffff0001, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3216.789915] FAULT_INJECTION: forcing a failure. [ 3216.789915] name failslab, interval 1, probability 0, space 0, times 0 [ 3216.791285] CPU: 0 PID: 14819 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3216.792116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3216.793095] Call Trace: [ 3216.793421] dump_stack+0x107/0x167 [ 3216.793860] should_fail.cold+0x5/0xa [ 3216.794321] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3216.794914] should_failslab+0x5/0x20 [ 3216.795364] kmem_cache_alloc_trace+0x55/0x320 [ 3216.795917] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3216.796541] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3216.797094] ? lock_chain_count+0x20/0x20 [ 3216.797603] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3216.798217] ? do_swap+0x134/0x210 [ 3216.798646] ? sort_r+0x239/0x360 [ 3216.799071] ? ext4_file_open+0xa50/0xa50 [ 3216.799569] ext4_getfsmap+0x695/0x990 [ 3216.800037] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3216.800646] ? ext4_fsmap_to_internal+0x260/0x260 [ 3216.801223] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3216.801842] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3216.802462] ext4_ioc_getfsmap+0x2b0/0x620 [ 3216.802975] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3216.803507] ? find_held_lock+0x2c/0x110 [ 3216.804001] ? avc_has_extended_perms+0x675/0xf40 [ 3216.804590] ? lock_downgrade+0x6d0/0x6d0 [ 3216.805091] __ext4_ioctl+0x8ad/0x4220 [ 3216.805554] ? ext4_reset_inode_seed+0x450/0x450 [ 3216.806127] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3216.806758] ? find_held_lock+0x2c/0x110 [ 3216.807264] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3216.807956] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3216.808561] ? do_vfs_ioctl+0x283/0x10d0 [ 3216.809047] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3216.809658] ? generic_block_fiemap+0x60/0x60 [ 3216.810196] ? lock_downgrade+0x6d0/0x6d0 [ 3216.810699] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3216.811286] ? wait_for_completion_io+0x270/0x270 [ 3216.811851] ? selinux_file_ioctl+0xb6/0x270 [ 3216.812380] ? __ext4_ioctl+0x4220/0x4220 [ 3216.812865] __x64_sys_ioctl+0x19a/0x210 [ 3216.813353] do_syscall_64+0x33/0x40 [ 3216.813801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3216.814420] RIP: 0033:0x7fb4d3c71b19 [ 3216.814861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3216.817067] RSP: 002b:00007fb4d11a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3216.817977] RAX: ffffffffffffffda RBX: 00007fb4d3d850e0 RCX: 00007fb4d3c71b19 [ 3216.818817] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000003 [ 3216.819685] RBP: 00007fb4d11a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3216.820539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3216.821395] R13: 00007ffc6b75877f R14: 00007fb4d11a5300 R15: 0000000000022000 [ 3216.902470] loop4: detected capacity change from 0 to 32768 [ 3216.905944] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3216.917229] FAULT_INJECTION: forcing a failure. [ 3216.917229] name failslab, interval 1, probability 0, space 0, times 0 [ 3216.920083] CPU: 1 PID: 14826 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3216.921632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3216.923482] Call Trace: [ 3216.924202] dump_stack+0x107/0x167 [ 3216.925014] should_fail.cold+0x5/0xa [ 3216.925870] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3216.926946] should_failslab+0x5/0x20 [ 3216.927789] kmem_cache_alloc_trace+0x55/0x320 [ 3216.928792] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3216.929905] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3216.930964] ? lock_chain_count+0x20/0x20 [ 3216.931876] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 19:41:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 61) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3216.933156] ? do_swap+0x134/0x210 [ 3216.933931] ? sort_r+0x239/0x360 [ 3216.934715] ? ext4_file_open+0xa50/0xa50 [ 3216.935648] ext4_getfsmap+0x695/0x990 [ 3216.936511] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3216.937640] ? ext4_fsmap_to_internal+0x260/0x260 [ 3216.938796] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3216.940221] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3216.941627] ext4_ioc_getfsmap+0x2b0/0x620 [ 3216.942570] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3216.943592] ? find_held_lock+0x2c/0x110 [ 3216.944502] ? avc_has_extended_perms+0x675/0xf40 [ 3216.945606] ? lock_downgrade+0x6d0/0x6d0 [ 3216.946528] __ext4_ioctl+0x8ad/0x4220 [ 3216.947395] ? ext4_reset_inode_seed+0x450/0x450 [ 3216.948444] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3216.949605] ? find_held_lock+0x2c/0x110 [ 3216.950521] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3216.951817] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3216.952950] ? do_vfs_ioctl+0x283/0x10d0 [ 3216.953848] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3216.955021] ? generic_block_fiemap+0x60/0x60 [ 3216.956009] ? lock_downgrade+0x6d0/0x6d0 [ 3216.956932] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3216.957998] ? wait_for_completion_io+0x270/0x270 [ 3216.959081] ? selinux_file_ioctl+0xb6/0x270 [ 3216.960049] ? __ext4_ioctl+0x4220/0x4220 [ 3216.960983] __x64_sys_ioctl+0x19a/0x210 [ 3216.961881] do_syscall_64+0x33/0x40 [ 3216.962707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3216.963849] RIP: 0033:0x7fcaa5e39b19 [ 3216.964674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3216.968730] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3216.970387] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3216.971971] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3216.973544] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3216.975123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3216.976714] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3216.990226] FAULT_INJECTION: forcing a failure. [ 3216.990226] name failslab, interval 1, probability 0, space 0, times 0 [ 3216.993027] CPU: 1 PID: 14824 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3216.994565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3216.996394] Call Trace: [ 3216.996995] dump_stack+0x107/0x167 [ 3216.997804] should_fail.cold+0x5/0xa [ 3216.998648] ? ext4_getfsmap_datadev+0x89d/0x25c0 [ 3216.999719] should_failslab+0x5/0x20 [ 3217.000569] kmem_cache_alloc_trace+0x55/0x320 [ 3217.001586] ? ext4_bg_num_gdb+0x172/0x250 [ 3217.002530] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3217.003591] ? lock_chain_count+0x20/0x20 [ 3217.004507] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.005652] ? do_swap+0x134/0x210 [ 3217.006434] ? sort_r+0x239/0x360 [ 3217.007213] ? ext4_file_open+0xa50/0xa50 [ 3217.008141] ext4_getfsmap+0x695/0x990 [ 3217.009003] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.010129] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.011221] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.012391] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.013536] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.014471] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.015513] ? find_held_lock+0x2c/0x110 [ 3217.016417] ? avc_has_extended_perms+0x675/0xf40 [ 3217.017529] ? lock_downgrade+0x6d0/0x6d0 [ 3217.018444] __ext4_ioctl+0x8ad/0x4220 [ 3217.019345] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.020390] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.021561] ? find_held_lock+0x2c/0x110 [ 3217.022458] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.023756] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.024890] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.025794] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.026968] ? generic_block_fiemap+0x60/0x60 [ 3217.027957] ? lock_downgrade+0x6d0/0x6d0 [ 3217.028874] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.029935] ? wait_for_completion_io+0x270/0x270 [ 3217.031033] ? selinux_file_ioctl+0xb6/0x270 [ 3217.032037] ? __ext4_ioctl+0x4220/0x4220 [ 3217.032952] __x64_sys_ioctl+0x19a/0x210 [ 3217.033846] do_syscall_64+0x33/0x40 [ 3217.034676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.035814] RIP: 0033:0x7f81caa8db19 [ 3217.036632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.040732] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.042774] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3217.044492] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.046073] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.047665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.049230] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3217.053831] FAULT_INJECTION: forcing a failure. [ 3217.053831] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.056439] CPU: 1 PID: 14825 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3217.057972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.059822] Call Trace: [ 3217.060398] dump_stack+0x107/0x167 [ 3217.061208] should_fail.cold+0x5/0xa [ 3217.062049] ? create_object.isra.0+0x3a/0xa30 [ 3217.063081] should_failslab+0x5/0x20 [ 3217.063921] kmem_cache_alloc+0x5b/0x310 [ 3217.064820] create_object.isra.0+0x3a/0xa30 [ 3217.065791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3217.066936] kmem_cache_alloc_trace+0x151/0x320 [ 3217.067970] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3217.069007] ? lock_chain_count+0x20/0x20 [ 3217.069917] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.071064] ? do_swap+0x134/0x210 [ 3217.071852] ? sort_r+0x239/0x360 [ 3217.072616] ? ext4_file_open+0xa50/0xa50 [ 3217.073530] ext4_getfsmap+0x695/0x990 [ 3217.074388] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.075536] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.076601] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.077759] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.078912] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.079854] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.080858] ? find_held_lock+0x2c/0x110 [ 3217.081766] ? avc_has_extended_perms+0x675/0xf40 [ 3217.082872] ? lock_downgrade+0x6d0/0x6d0 [ 3217.083806] __ext4_ioctl+0x8ad/0x4220 [ 3217.084721] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.085919] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.087156] ? find_held_lock+0x2c/0x110 [ 3217.088067] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.089323] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.090467] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.091376] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.092535] ? generic_block_fiemap+0x60/0x60 [ 3217.093536] ? lock_downgrade+0x6d0/0x6d0 [ 3217.094438] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.095522] ? wait_for_completion_io+0x270/0x270 [ 3217.096599] ? selinux_file_ioctl+0xb6/0x270 [ 3217.097584] ? __ext4_ioctl+0x4220/0x4220 [ 3217.098503] __x64_sys_ioctl+0x19a/0x210 [ 3217.099404] do_syscall_64+0x33/0x40 [ 3217.100226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.101352] RIP: 0033:0x7f7edf809b19 [ 3217.102183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.106236] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.107920] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3217.109499] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.111086] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.112661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.114234] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3217.127169] FAULT_INJECTION: forcing a failure. [ 3217.127169] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.129705] CPU: 1 PID: 14831 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3217.131189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.132967] Call Trace: [ 3217.133553] dump_stack+0x107/0x167 [ 3217.134333] should_fail.cold+0x5/0xa 19:41:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 67) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3217.135170] ? create_object.isra.0+0x3a/0xa30 [ 3217.136355] should_failslab+0x5/0x20 [ 3217.137167] kmem_cache_alloc+0x5b/0x310 [ 3217.138045] create_object.isra.0+0x3a/0xa30 [ 3217.138996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3217.140078] kmem_cache_alloc_trace+0x151/0x320 [ 3217.141075] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3217.142083] ? lock_chain_count+0x20/0x20 [ 3217.142975] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.144328] ? do_swap+0x134/0x210 [ 3217.145294] ? sort_r+0x239/0x360 [ 3217.146122] ? ext4_file_open+0xa50/0xa50 [ 3217.147032] ext4_getfsmap+0x695/0x990 [ 3217.147375] FAULT_INJECTION: forcing a failure. [ 3217.147375] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.147871] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.147897] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.151191] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.152317] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.153412] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.154314] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.155303] ? find_held_lock+0x2c/0x110 [ 3217.156168] ? avc_has_extended_perms+0x675/0xf40 [ 3217.157228] ? lock_downgrade+0x6d0/0x6d0 [ 3217.158114] __ext4_ioctl+0x8ad/0x4220 [ 3217.158976] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.159993] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.161098] ? find_held_lock+0x2c/0x110 [ 3217.161979] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.163220] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.164315] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.165191] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.166298] ? generic_block_fiemap+0x60/0x60 [ 3217.167278] ? lock_downgrade+0x6d0/0x6d0 [ 3217.168168] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.169186] ? wait_for_completion_io+0x270/0x270 [ 3217.170217] ? selinux_file_ioctl+0xb6/0x270 [ 3217.171181] ? __ext4_ioctl+0x4220/0x4220 [ 3217.172063] __x64_sys_ioctl+0x19a/0x210 [ 3217.172925] do_syscall_64+0x33/0x40 [ 3217.173717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.174808] RIP: 0033:0x7fb4d3c71b19 [ 3217.175617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.179516] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.181124] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3217.182634] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.184150] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.185675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.187192] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3217.188736] CPU: 0 PID: 14836 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3217.189495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.190447] Call Trace: [ 3217.190741] dump_stack+0x107/0x167 [ 3217.191138] should_fail.cold+0x5/0xa [ 3217.191576] ? create_object.isra.0+0x3a/0xa30 [ 3217.192070] should_failslab+0x5/0x20 [ 3217.192506] kmem_cache_alloc+0x5b/0x310 [ 3217.192948] create_object.isra.0+0x3a/0xa30 [ 3217.193453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3217.193999] kmem_cache_alloc_trace+0x151/0x320 [ 3217.194537] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3217.195055] ? lock_chain_count+0x20/0x20 [ 3217.195500] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.196084] ? do_swap+0x134/0x210 [ 3217.196471] ? sort_r+0x239/0x360 [ 3217.196868] ? ext4_file_open+0xa50/0xa50 [ 3217.197317] ext4_getfsmap+0x695/0x990 [ 3217.197734] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.198314] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.198836] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.199443] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.199998] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.200449] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.200969] ? find_held_lock+0x2c/0x110 [ 3217.201411] ? avc_has_extended_perms+0x675/0xf40 [ 3217.201945] ? lock_downgrade+0x6d0/0x6d0 [ 3217.202389] __ext4_ioctl+0x8ad/0x4220 [ 3217.202809] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.203324] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.203926] ? find_held_lock+0x2c/0x110 [ 3217.204369] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.205030] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.205586] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.206021] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.206590] ? generic_block_fiemap+0x60/0x60 [ 3217.207077] ? lock_downgrade+0x6d0/0x6d0 [ 3217.207524] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.208038] ? wait_for_completion_io+0x270/0x270 [ 3217.208558] ? selinux_file_ioctl+0xb6/0x270 [ 3217.209063] ? __ext4_ioctl+0x4220/0x4220 [ 3217.209512] __x64_sys_ioctl+0x19a/0x210 [ 3217.209976] do_syscall_64+0x33/0x40 [ 3217.210378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.210966] RIP: 0033:0x7fcaa5e39b19 [ 3217.211391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.213486] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.214501] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3217.215316] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.216122] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.216933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.217751] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3217.223934] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:41:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 71) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:02 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x20940, 0x8e) r3 = open$dir(&(0x7f0000000140)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:41:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 68) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 62) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3217.295709] FAULT_INJECTION: forcing a failure. [ 3217.295709] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.297013] CPU: 0 PID: 14842 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3217.297760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.298656] Call Trace: [ 3217.298950] dump_stack+0x107/0x167 [ 3217.299343] should_fail.cold+0x5/0xa [ 3217.299756] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3217.300276] should_failslab+0x5/0x20 [ 3217.300687] kmem_cache_alloc_trace+0x55/0x320 [ 3217.301179] ? ext4_bg_num_gdb+0x172/0x250 [ 3217.301637] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3217.302179] ? lock_chain_count+0x20/0x20 [ 3217.302631] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.303221] ? do_swap+0x134/0x210 [ 3217.303605] ? sort_r+0x239/0x360 [ 3217.304002] ? ext4_file_open+0xa50/0xa50 [ 3217.304455] ext4_getfsmap+0x695/0x990 [ 3217.304898] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.305452] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.305970] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.306537] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.307103] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.307564] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.308056] ? find_held_lock+0x2c/0x110 [ 3217.308500] ? avc_has_extended_perms+0x675/0xf40 [ 3217.309042] ? lock_downgrade+0x6d0/0x6d0 [ 3217.309524] __ext4_ioctl+0x8ad/0x4220 [ 3217.309951] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.310495] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.311062] ? find_held_lock+0x2c/0x110 [ 3217.311531] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.312148] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.312738] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.313176] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.313736] ? generic_block_fiemap+0x60/0x60 [ 3217.314216] ? lock_downgrade+0x6d0/0x6d0 [ 3217.314663] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.315187] ? wait_for_completion_io+0x270/0x270 [ 3217.315711] ? selinux_file_ioctl+0xb6/0x270 [ 3217.316190] ? __ext4_ioctl+0x4220/0x4220 [ 3217.316639] __x64_sys_ioctl+0x19a/0x210 [ 3217.317080] do_syscall_64+0x33/0x40 [ 3217.317510] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.318059] RIP: 0033:0x7fb4d3c71b19 [ 3217.318485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.320461] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.321276] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3217.321846] FAULT_INJECTION: forcing a failure. [ 3217.321846] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.322038] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.322054] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.325910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.326671] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3217.327467] CPU: 1 PID: 14843 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3217.328919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.330660] Call Trace: [ 3217.331226] dump_stack+0x107/0x167 [ 3217.331989] should_fail.cold+0x5/0xa [ 3217.332787] ? create_object.isra.0+0x3a/0xa30 [ 3217.333740] should_failslab+0x5/0x20 [ 3217.334532] kmem_cache_alloc+0x5b/0x310 [ 3217.335389] create_object.isra.0+0x3a/0xa30 [ 3217.336305] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3217.337385] kmem_cache_alloc_trace+0x151/0x320 [ 3217.338367] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3217.339375] ? lock_chain_count+0x20/0x20 [ 3217.340235] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.341299] ? do_swap+0x134/0x210 [ 3217.342051] ? sort_r+0x239/0x360 [ 3217.342774] ? ext4_file_open+0xa50/0xa50 [ 3217.343673] ext4_getfsmap+0x695/0x990 [ 3217.344484] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.345556] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.346563] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.347685] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.349036] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.350187] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.351275] ? find_held_lock+0x2c/0x110 [ 3217.352175] ? avc_has_extended_perms+0x675/0xf40 [ 3217.353273] ? lock_downgrade+0x6d0/0x6d0 [ 3217.354161] __ext4_ioctl+0x8ad/0x4220 19:41:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 63) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3217.355022] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.356171] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.357282] ? find_held_lock+0x2c/0x110 [ 3217.358180] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.359474] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.360559] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.361548] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.362645] ? generic_block_fiemap+0x60/0x60 [ 3217.363607] ? lock_downgrade+0x6d0/0x6d0 [ 3217.364478] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.365490] ? wait_for_completion_io+0x270/0x270 [ 3217.366517] ? selinux_file_ioctl+0xb6/0x270 [ 3217.367442] ? __ext4_ioctl+0x4220/0x4220 [ 3217.368308] __x64_sys_ioctl+0x19a/0x210 [ 3217.369169] do_syscall_64+0x33/0x40 [ 3217.369990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.371104] RIP: 0033:0x7f81caa8db19 [ 3217.371918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.373470] FAULT_INJECTION: forcing a failure. [ 3217.373470] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.375846] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.375868] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3217.375879] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.375896] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.383371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.384910] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3217.386458] CPU: 0 PID: 14847 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3217.387272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.388221] Call Trace: [ 3217.388524] dump_stack+0x107/0x167 [ 3217.388941] should_fail.cold+0x5/0xa [ 3217.389374] ? create_object.isra.0+0x3a/0xa30 [ 3217.389896] should_failslab+0x5/0x20 [ 3217.390330] kmem_cache_alloc+0x5b/0x310 [ 3217.390791] ? lock_downgrade+0x6d0/0x6d0 [ 3217.391273] create_object.isra.0+0x3a/0xa30 [ 3217.391776] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3217.392354] kmem_cache_alloc_trace+0x151/0x320 [ 3217.392897] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3217.393442] ? lock_chain_count+0x20/0x20 [ 3217.393921] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.394513] ? do_swap+0x134/0x210 [ 3217.394931] ? sort_r+0x239/0x360 [ 3217.395335] ? ext4_file_open+0xa50/0xa50 [ 3217.395815] ext4_getfsmap+0x695/0x990 [ 3217.396263] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.396848] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.397123] FAULT_INJECTION: forcing a failure. [ 3217.397123] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.397404] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.397429] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.397450] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.397472] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.401953] ? find_held_lock+0x2c/0x110 [ 3217.402420] ? avc_has_extended_perms+0x675/0xf40 [ 3217.402996] ? lock_downgrade+0x6d0/0x6d0 [ 3217.403475] __ext4_ioctl+0x8ad/0x4220 [ 3217.403899] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.404442] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.405003] ? find_held_lock+0x2c/0x110 [ 3217.405477] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.406093] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.406689] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.407132] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.407730] ? generic_block_fiemap+0x60/0x60 [ 3217.408210] ? lock_downgrade+0x6d0/0x6d0 [ 3217.408656] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.409169] ? wait_for_completion_io+0x270/0x270 [ 3217.409730] ? selinux_file_ioctl+0xb6/0x270 [ 3217.410203] ? __ext4_ioctl+0x4220/0x4220 [ 3217.410679] __x64_sys_ioctl+0x19a/0x210 [ 3217.411125] do_syscall_64+0x33/0x40 [ 3217.411526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.412072] RIP: 0033:0x7fb4d3c71b19 [ 3217.412471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.414428] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.415245] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3217.416009] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.416768] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.417526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.418284] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3217.419073] CPU: 1 PID: 14845 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3217.420573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.422338] Call Trace: [ 3217.422927] dump_stack+0x107/0x167 [ 3217.423722] should_fail.cold+0x5/0xa [ 3217.424549] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3217.425563] should_failslab+0x5/0x20 [ 3217.426367] kmem_cache_alloc_trace+0x55/0x320 [ 3217.427333] ? ext4_get_group_desc+0x2a0/0x560 19:41:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 96) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3217.428296] ext4_getfsmap_datadev+0x719/0x25c0 [ 3217.429420] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.430490] ? do_swap+0x134/0x210 [ 3217.431252] ? sort_r+0x239/0x360 [ 3217.431984] ? ext4_file_open+0xa50/0xa50 [ 3217.432858] ext4_getfsmap+0x695/0x990 [ 3217.433683] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.434756] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.435787] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.436906] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.438016] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.438921] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.439892] ? find_held_lock+0x2c/0x110 [ 3217.440758] ? avc_has_extended_perms+0x675/0xf40 [ 3217.441818] ? lock_downgrade+0x6d0/0x6d0 [ 3217.442697] __ext4_ioctl+0x8ad/0x4220 [ 3217.443544] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.444556] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.445665] ? find_held_lock+0x2c/0x110 [ 3217.446535] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.447761] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.448842] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.449697] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.450975] ? generic_block_fiemap+0x60/0x60 [ 3217.452182] ? lock_downgrade+0x6d0/0x6d0 [ 3217.453282] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.454362] ? wait_for_completion_io+0x270/0x270 [ 3217.455422] ? selinux_file_ioctl+0xb6/0x270 [ 3217.456364] ? __ext4_ioctl+0x4220/0x4220 [ 3217.457249] __x64_sys_ioctl+0x19a/0x210 [ 3217.458124] do_syscall_64+0x33/0x40 [ 3217.458952] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.460047] RIP: 0033:0x7fcaa5e39b19 [ 3217.460841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.464784] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.466399] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3217.467927] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.469441] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.470966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.472480] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3217.494553] FAULT_INJECTION: forcing a failure. [ 3217.494553] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.497066] CPU: 1 PID: 14851 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3217.498569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.500356] Call Trace: [ 3217.500944] dump_stack+0x107/0x167 [ 3217.501734] should_fail.cold+0x5/0xa [ 3217.502572] ? ext4_getfsmap_datadev+0xd9f/0x25c0 19:41:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3217.503658] should_failslab+0x5/0x20 [ 3217.504670] kmem_cache_alloc_trace+0x55/0x320 [ 3217.505643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3217.506730] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3217.507748] ? lock_chain_count+0x20/0x20 [ 3217.508633] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.509728] ? do_swap+0x134/0x210 [ 3217.510485] ? sort_r+0x239/0x360 [ 3217.511252] ? ext4_file_open+0xa50/0xa50 [ 3217.512143] ext4_getfsmap+0x695/0x990 [ 3217.512975] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.514070] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.515130] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.516248] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.517157] FAULT_INJECTION: forcing a failure. [ 3217.517157] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.517342] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.517360] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.517377] ? find_held_lock+0x2c/0x110 [ 3217.517402] ? avc_has_extended_perms+0x675/0xf40 [ 3217.517463] ? lock_downgrade+0x6d0/0x6d0 [ 3217.523163] __ext4_ioctl+0x8ad/0x4220 [ 3217.524006] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.525026] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.526140] ? find_held_lock+0x2c/0x110 [ 3217.527031] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.528242] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.529347] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.530218] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.531336] ? generic_block_fiemap+0x60/0x60 [ 3217.532295] ? lock_downgrade+0x6d0/0x6d0 [ 3217.533240] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.534279] ? wait_for_completion_io+0x270/0x270 [ 3217.535336] ? selinux_file_ioctl+0xb6/0x270 [ 3217.536287] ? __ext4_ioctl+0x4220/0x4220 [ 3217.537165] __x64_sys_ioctl+0x19a/0x210 [ 3217.538031] do_syscall_64+0x33/0x40 [ 3217.538836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.539938] RIP: 0033:0x7f7edf809b19 [ 3217.540729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.544683] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.546265] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3217.547810] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.549291] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.550769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.552265] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3217.554098] CPU: 0 PID: 14853 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3217.554859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.555755] Call Trace: [ 3217.556052] dump_stack+0x107/0x167 [ 3217.556447] should_fail.cold+0x5/0xa [ 3217.556859] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3217.557375] should_failslab+0x5/0x20 [ 3217.557815] kmem_cache_alloc_trace+0x55/0x320 [ 3217.558307] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3217.558905] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3217.559420] ? lock_chain_count+0x20/0x20 [ 3217.559867] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.560461] ? do_swap+0x134/0x210 [ 3217.560847] ? sort_r+0x239/0x360 [ 3217.561219] ? ext4_file_open+0xa50/0xa50 [ 3217.561703] ext4_getfsmap+0x695/0x990 [ 3217.562138] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.562721] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.563250] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.563816] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.564372] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.564824] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.565314] ? find_held_lock+0x2c/0x110 [ 3217.565769] ? avc_has_extended_perms+0x675/0xf40 [ 3217.566305] ? lock_downgrade+0x6d0/0x6d0 [ 3217.566783] __ext4_ioctl+0x8ad/0x4220 [ 3217.567216] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.567725] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.568286] ? find_held_lock+0x2c/0x110 [ 3217.568761] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.569379] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.569986] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.570428] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.571034] ? generic_block_fiemap+0x60/0x60 [ 3217.571516] ? lock_downgrade+0x6d0/0x6d0 [ 3217.571990] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.572510] ? wait_for_completion_io+0x270/0x270 [ 3217.573068] ? selinux_file_ioctl+0xb6/0x270 [ 3217.573545] ? __ext4_ioctl+0x4220/0x4220 [ 3217.574023] __x64_sys_ioctl+0x19a/0x210 [ 3217.574467] do_syscall_64+0x33/0x40 [ 3217.574901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.575451] RIP: 0033:0x7fb4d3c71b19 [ 3217.575876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.577838] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.578709] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3217.579498] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.580258] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.581024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.581787] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:41:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 72) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3217.655023] FAULT_INJECTION: forcing a failure. [ 3217.655023] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.656395] CPU: 0 PID: 14859 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3217.657185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.658148] Call Trace: [ 3217.658457] dump_stack+0x107/0x167 [ 3217.658889] should_fail.cold+0x5/0xa [ 3217.659351] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3217.659928] should_failslab+0x5/0x20 [ 3217.660373] kmem_cache_alloc_trace+0x55/0x320 [ 3217.660908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3217.661494] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3217.662055] ? lock_chain_count+0x20/0x20 [ 3217.662540] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.663150] ? do_swap+0x134/0x210 [ 3217.663566] ? sort_r+0x239/0x360 [ 3217.663964] ? ext4_file_open+0xa50/0xa50 [ 3217.664457] ext4_getfsmap+0x695/0x990 [ 3217.664917] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.665507] ? ext4_fsmap_to_internal+0x260/0x260 [ 3217.666073] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3217.666683] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3217.667297] ext4_ioc_getfsmap+0x2b0/0x620 [ 3217.667784] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3217.668309] ? find_held_lock+0x2c/0x110 [ 3217.668783] ? avc_has_extended_perms+0x675/0xf40 [ 3217.669370] ? lock_downgrade+0x6d0/0x6d0 [ 3217.669845] __ext4_ioctl+0x8ad/0x4220 [ 3217.670311] ? ext4_reset_inode_seed+0x450/0x450 [ 3217.670871] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.671481] ? find_held_lock+0x2c/0x110 [ 3217.671960] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3217.672625] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3217.673229] ? do_vfs_ioctl+0x283/0x10d0 [ 3217.673706] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3217.674317] ? generic_block_fiemap+0x60/0x60 [ 3217.674832] ? lock_downgrade+0x6d0/0x6d0 [ 3217.675342] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3217.675899] ? wait_for_completion_io+0x270/0x270 [ 3217.676466] ? selinux_file_ioctl+0xb6/0x270 [ 3217.676974] ? __ext4_ioctl+0x4220/0x4220 [ 3217.677452] __x64_sys_ioctl+0x19a/0x210 [ 3217.677928] do_syscall_64+0x33/0x40 [ 3217.678363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.678962] RIP: 0033:0x7f81caa8db19 [ 3217.679394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.681516] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.682398] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3217.683226] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3217.684044] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3217.684864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3217.685684] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3221.348275] Bluetooth: hci2: command 0x0409 tx timeout [ 3221.988315] Bluetooth: hci5: command 0x0409 tx timeout [ 3222.117310] Bluetooth: hci6: command 0x0409 tx timeout [ 3223.397311] Bluetooth: hci2: command 0x041b tx timeout [ 3224.037284] Bluetooth: hci5: command 0x041b tx timeout [ 3224.164264] Bluetooth: hci6: command 0x041b tx timeout [ 3225.445268] Bluetooth: hci2: command 0x040f tx timeout [ 3226.084322] Bluetooth: hci5: command 0x040f tx timeout [ 3226.213261] Bluetooth: hci6: command 0x040f tx timeout [ 3227.492306] Bluetooth: hci2: command 0x0419 tx timeout [ 3228.064700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3228.065689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3228.067539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3228.098943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3228.099927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3228.101380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3228.132256] Bluetooth: hci5: command 0x0419 tx timeout [ 3228.261307] Bluetooth: hci6: command 0x0419 tx timeout [ 3228.468785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3228.469741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3228.471345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3228.492683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3228.493573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3228.494756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3228.633223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3228.634293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3228.635837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3228.649884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3228.650878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3228.652130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:41:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 69) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 97) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 65) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 73) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:26 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000000000000000401000000000000020000000000000008000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea00000000000020000000000000000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090dc240412cc6935f0ad59c10b4772addad6ed5d51bd8fb8edec274c5904cb5752d07d41c58b07be41f52f7e5713dbc5ee81ed410e6b"]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:41:26 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:41:26 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2e1, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:41:26 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b400000025f650d2045a7501aa11dc59934d70ded3258e55fd5093a76f14", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3241.023207] FAULT_INJECTION: forcing a failure. [ 3241.023207] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.024629] CPU: 1 PID: 16238 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3241.025422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.026363] Call Trace: [ 3241.026680] dump_stack+0x107/0x167 [ 3241.027108] should_fail.cold+0x5/0xa [ 3241.027549] ? create_object.isra.0+0x3a/0xa30 [ 3241.028075] should_failslab+0x5/0x20 [ 3241.028519] kmem_cache_alloc+0x5b/0x310 [ 3241.028988] ? lock_downgrade+0x6d0/0x6d0 [ 3241.029462] create_object.isra.0+0x3a/0xa30 [ 3241.029961] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.030545] kmem_cache_alloc_trace+0x151/0x320 [ 3241.031076] ext4_getfsmap_datadev+0x719/0x25c0 [ 3241.031622] ? lock_chain_count+0x20/0x20 [ 3241.032098] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.032684] ? do_swap+0x134/0x210 [ 3241.033091] ? sort_r+0x239/0x360 [ 3241.033490] ? ext4_file_open+0xa50/0xa50 [ 3241.033964] ext4_getfsmap+0x695/0x990 [ 3241.034410] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.034990] ? ext4_fsmap_to_internal+0x260/0x260 [ 3241.035550] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3241.036156] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.036747] ext4_ioc_getfsmap+0x2b0/0x620 [ 3241.037231] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3241.037751] ? find_held_lock+0x2c/0x110 [ 3241.038230] ? avc_has_extended_perms+0x675/0xf40 [ 3241.038805] ? lock_downgrade+0x6d0/0x6d0 [ 3241.039286] __ext4_ioctl+0x8ad/0x4220 [ 3241.039737] ? ext4_reset_inode_seed+0x450/0x450 [ 3241.040286] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.040884] ? find_held_lock+0x2c/0x110 [ 3241.041358] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3241.042014] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3241.042609] ? do_vfs_ioctl+0x283/0x10d0 [ 3241.043083] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3241.043700] ? generic_block_fiemap+0x60/0x60 [ 3241.044208] ? lock_downgrade+0x6d0/0x6d0 [ 3241.044686] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3241.045241] ? wait_for_completion_io+0x270/0x270 [ 3241.045795] ? selinux_file_ioctl+0xb6/0x270 [ 3241.046297] ? __ext4_ioctl+0x4220/0x4220 [ 3241.046767] __x64_sys_ioctl+0x19a/0x210 [ 3241.047252] do_syscall_64+0x33/0x40 [ 3241.047682] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.048276] RIP: 0033:0x7fcaa5e39b19 [ 3241.048699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.050815] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3241.051700] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3241.052518] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3241.053361] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.054177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3241.055001] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3241.055780] loop4: detected capacity change from 0 to 32768 [ 3241.058536] FAULT_INJECTION: forcing a failure. [ 3241.058536] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.059909] CPU: 1 PID: 16247 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3241.060709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.061652] Call Trace: [ 3241.061951] dump_stack+0x107/0x167 [ 3241.062367] should_fail.cold+0x5/0xa [ 3241.062800] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3241.063364] should_failslab+0x5/0x20 [ 3241.063797] kmem_cache_alloc_trace+0x55/0x320 [ 3241.064319] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.064897] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3241.065439] ? lock_chain_count+0x20/0x20 [ 3241.065919] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.066503] ? do_swap+0x134/0x210 [ 3241.066908] ? sort_r+0x239/0x360 [ 3241.067310] ? ext4_file_open+0xa50/0xa50 [ 3241.067787] ext4_getfsmap+0x695/0x990 [ 3241.068232] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.068811] ? ext4_fsmap_to_internal+0x260/0x260 [ 3241.069364] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3241.069969] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.070560] ext4_ioc_getfsmap+0x2b0/0x620 [ 3241.071043] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3241.071575] ? find_held_lock+0x2c/0x110 [ 3241.072041] ? avc_has_extended_perms+0x675/0xf40 [ 3241.072619] ? lock_downgrade+0x6d0/0x6d0 [ 3241.072910] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3241.073097] __ext4_ioctl+0x8ad/0x4220 [ 3241.075281] ? ext4_reset_inode_seed+0x450/0x450 [ 3241.075820] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.076418] ? find_held_lock+0x2c/0x110 [ 3241.076886] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3241.077538] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3241.078121] ? do_vfs_ioctl+0x283/0x10d0 [ 3241.078585] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3241.079189] ? generic_block_fiemap+0x60/0x60 [ 3241.079700] ? lock_downgrade+0x6d0/0x6d0 [ 3241.080177] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3241.080732] ? wait_for_completion_io+0x270/0x270 [ 3241.081287] ? selinux_file_ioctl+0xb6/0x270 [ 3241.081794] ? __ext4_ioctl+0x4220/0x4220 [ 3241.082267] __x64_sys_ioctl+0x19a/0x210 [ 3241.082736] do_syscall_64+0x33/0x40 [ 3241.083173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.083759] RIP: 0033:0x7f81caa8db19 [ 3241.084186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.086271] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3241.087143] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3241.087958] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3241.088773] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.089591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3241.090401] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3241.103997] FAULT_INJECTION: forcing a failure. [ 3241.103997] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.105328] CPU: 1 PID: 16251 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3241.106121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.107067] Call Trace: [ 3241.107392] dump_stack+0x107/0x167 [ 3241.107846] should_fail.cold+0x5/0xa [ 3241.108323] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3241.108923] should_failslab+0x5/0x20 [ 3241.109367] kmem_cache_alloc_trace+0x55/0x320 [ 3241.109902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.110485] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3241.111023] ? lock_chain_count+0x20/0x20 [ 3241.111504] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.112082] ? do_swap+0x134/0x210 [ 3241.112484] ? sort_r+0x239/0x360 [ 3241.112876] ? ext4_file_open+0xa50/0xa50 [ 3241.113349] ext4_getfsmap+0x695/0x990 [ 3241.113798] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.114381] ? ext4_fsmap_to_internal+0x260/0x260 [ 3241.114935] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3241.115548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3241.116148] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.116733] ? asm_sysvec_call_function_single+0x12/0x20 [ 3241.117357] ? copy_user_generic_string+0x2c/0x40 [ 3241.117911] ext4_ioc_getfsmap+0x2b0/0x620 [ 3241.118399] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3241.118919] ? find_held_lock+0x2c/0x110 [ 3241.119392] ? avc_has_extended_perms+0x675/0xf40 [ 3241.119956] ? lock_downgrade+0x6d0/0x6d0 [ 3241.120428] __ext4_ioctl+0x8ad/0x4220 [ 3241.120873] ? ext4_reset_inode_seed+0x450/0x450 [ 3241.121414] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.122006] ? find_held_lock+0x2c/0x110 [ 3241.122472] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3241.123125] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3241.123713] ? do_vfs_ioctl+0x283/0x10d0 [ 3241.124171] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3241.124763] ? generic_block_fiemap+0x60/0x60 [ 3241.125268] ? lock_downgrade+0x6d0/0x6d0 [ 3241.125734] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3241.126280] ? wait_for_completion_io+0x270/0x270 [ 3241.126834] ? selinux_file_ioctl+0xb6/0x270 [ 3241.127343] ? __ext4_ioctl+0x4220/0x4220 [ 3241.127812] __x64_sys_ioctl+0x19a/0x210 [ 3241.128272] do_syscall_64+0x33/0x40 [ 3241.128695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.129275] RIP: 0033:0x7fb4d3c71b19 [ 3241.129694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.131658] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3241.132469] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3241.133229] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3241.133986] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.134746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3241.135510] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3241.144086] FAULT_INJECTION: forcing a failure. [ 3241.144086] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.145389] CPU: 1 PID: 16250 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3241.146127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.147010] Call Trace: [ 3241.147303] dump_stack+0x107/0x167 [ 3241.147692] should_fail.cold+0x5/0xa [ 3241.148100] ? create_object.isra.0+0x3a/0xa30 [ 3241.148586] should_failslab+0x5/0x20 [ 3241.148991] kmem_cache_alloc+0x5b/0x310 [ 3241.149428] create_object.isra.0+0x3a/0xa30 [ 3241.149894] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.150479] kmem_cache_alloc_trace+0x151/0x320 [ 3241.150983] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3241.151532] ? lock_chain_count+0x20/0x20 [ 3241.151983] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.152566] ? do_swap+0x134/0x210 [ 3241.152952] ? sort_r+0x239/0x360 [ 3241.153322] ? ext4_file_open+0xa50/0xa50 [ 3241.153772] ext4_getfsmap+0x695/0x990 [ 3241.154193] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.154739] ? ext4_fsmap_to_internal+0x260/0x260 [ 3241.155294] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3241.155890] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.156474] ext4_ioc_getfsmap+0x2b0/0x620 [ 3241.156951] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3241.157466] ? find_held_lock+0x2c/0x110 [ 3241.157926] ? avc_has_extended_perms+0x675/0xf40 [ 3241.158466] ? lock_downgrade+0x6d0/0x6d0 [ 3241.158944] __ext4_ioctl+0x8ad/0x4220 [ 3241.159401] ? ext4_reset_inode_seed+0x450/0x450 [ 3241.159911] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.160506] ? find_held_lock+0x2c/0x110 [ 3241.160953] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3241.161605] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3241.162190] ? do_vfs_ioctl+0x283/0x10d0 [ 3241.162655] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3241.163265] ? generic_block_fiemap+0x60/0x60 [ 3241.163754] ? lock_downgrade+0x6d0/0x6d0 [ 3241.164225] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3241.164747] ? wait_for_completion_io+0x270/0x270 [ 3241.165300] ? selinux_file_ioctl+0xb6/0x270 [ 3241.165799] ? __ext4_ioctl+0x4220/0x4220 [ 3241.166253] __x64_sys_ioctl+0x19a/0x210 [ 3241.166715] do_syscall_64+0x33/0x40 [ 3241.167126] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.167711] RIP: 0033:0x7f7edf809b19 [ 3241.168110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.170194] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3241.171007] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3241.171820] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3241.172631] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.173436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3241.174244] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 19:41:26 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x309, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3241.218984] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:41:26 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x4030, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={&(0x7f0000000140), 0xe}, 0x4010, 0x4, 0x6, 0x8, 0xf31}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x32d, 0x28, 0x5, 0x100, 0xffffffffffffffff, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:41:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 70) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:26 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x4}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3241.266007] loop4: detected capacity change from 0 to 135266304 [ 3241.275868] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:41:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 74) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3241.315639] FAULT_INJECTION: forcing a failure. [ 3241.315639] name failslab, interval 1, probability 0, space 0, times 0 19:41:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 98) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:26 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x37d, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3241.317329] CPU: 1 PID: 16278 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3241.318103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.319043] Call Trace: [ 3241.319357] dump_stack+0x107/0x167 [ 3241.319773] should_fail.cold+0x5/0xa [ 3241.320208] ? create_object.isra.0+0x3a/0xa30 [ 3241.320729] should_failslab+0x5/0x20 [ 3241.321162] kmem_cache_alloc+0x5b/0x310 [ 3241.321611] ? lock_downgrade+0x6d0/0x6d0 [ 3241.322084] create_object.isra.0+0x3a/0xa30 [ 3241.322557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.323144] kmem_cache_alloc_trace+0x151/0x320 [ 3241.323658] ext4_getfsmap_datadev+0x719/0x25c0 [ 3241.324195] ? lock_chain_count+0x20/0x20 [ 3241.324643] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.325226] ? do_swap+0x134/0x210 [ 3241.325633] ? sort_r+0x239/0x360 [ 3241.326030] ? ext4_file_open+0xa50/0xa50 [ 3241.326487] ext4_getfsmap+0x695/0x990 [ 3241.326928] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.327489] ? ext4_fsmap_to_internal+0x260/0x260 [ 3241.328037] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3241.328608] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.329209] ext4_ioc_getfsmap+0x2b0/0x620 [ 3241.329689] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3241.330187] ? find_held_lock+0x2c/0x110 [ 3241.330654] ? avc_has_extended_perms+0x675/0xf40 [ 3241.331237] ? lock_downgrade+0x6d0/0x6d0 [ 3241.331708] __ext4_ioctl+0x8ad/0x4220 [ 3241.332149] ? ext4_reset_inode_seed+0x450/0x450 [ 3241.332688] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.333251] ? find_held_lock+0x2c/0x110 [ 3241.333718] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3241.334374] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3241.334961] ? do_vfs_ioctl+0x283/0x10d0 [ 3241.335425] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3241.335992] ? generic_block_fiemap+0x60/0x60 [ 3241.336502] ? lock_downgrade+0x6d0/0x6d0 [ 3241.336954] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3241.337499] ? wait_for_completion_io+0x270/0x270 [ 3241.338027] ? selinux_file_ioctl+0xb6/0x270 [ 3241.338526] ? __ext4_ioctl+0x4220/0x4220 [ 3241.338980] __x64_sys_ioctl+0x19a/0x210 [ 3241.339450] do_syscall_64+0x33/0x40 [ 3241.339874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.340456] RIP: 0033:0x7fcaa5e39b19 [ 3241.340862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.342945] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3241.343771] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3241.344532] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3241.345295] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.346057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3241.346820] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:41:26 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x5}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:41:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 66) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3241.382194] FAULT_INJECTION: forcing a failure. [ 3241.382194] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.383526] CPU: 1 PID: 16282 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3241.384269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.385148] Call Trace: [ 3241.385434] dump_stack+0x107/0x167 [ 3241.385823] should_fail.cold+0x5/0xa [ 3241.386231] ? create_object.isra.0+0x3a/0xa30 [ 3241.386717] should_failslab+0x5/0x20 [ 3241.387128] kmem_cache_alloc+0x5b/0x310 [ 3241.387567] create_object.isra.0+0x3a/0xa30 [ 3241.388033] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.388598] kmem_cache_alloc_trace+0x151/0x320 [ 3241.389099] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3241.389627] ? lock_chain_count+0x20/0x20 [ 3241.390072] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.390643] ? do_swap+0x134/0x210 [ 3241.391027] ? sort_r+0x239/0x360 [ 3241.391416] ? ext4_file_open+0xa50/0xa50 [ 3241.391865] ext4_getfsmap+0x695/0x990 [ 3241.392297] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.392846] ? ext4_fsmap_to_internal+0x260/0x260 [ 3241.393380] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3241.393944] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.394515] ext4_ioc_getfsmap+0x2b0/0x620 [ 3241.394967] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3241.395472] ? find_held_lock+0x2c/0x110 [ 3241.395910] ? avc_has_extended_perms+0x675/0xf40 [ 3241.396454] ? lock_downgrade+0x6d0/0x6d0 [ 3241.396914] __ext4_ioctl+0x8ad/0x4220 [ 3241.397349] ? ext4_reset_inode_seed+0x450/0x450 [ 3241.397854] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.398437] ? find_held_lock+0x2c/0x110 [ 3241.398877] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3241.399494] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3241.400042] ? do_vfs_ioctl+0x283/0x10d0 [ 3241.400475] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3241.401032] ? generic_block_fiemap+0x60/0x60 [ 3241.401508] ? lock_downgrade+0x6d0/0x6d0 [ 3241.401950] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3241.402465] ? wait_for_completion_io+0x270/0x270 [ 3241.402982] ? selinux_file_ioctl+0xb6/0x270 [ 3241.403477] ? __ext4_ioctl+0x4220/0x4220 [ 3241.403920] __x64_sys_ioctl+0x19a/0x210 [ 3241.404354] do_syscall_64+0x33/0x40 [ 3241.404750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.405293] RIP: 0033:0x7fb4d3c71b19 [ 3241.405689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.407649] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3241.408458] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3241.409214] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3241.409969] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.410726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3241.411488] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3241.429973] FAULT_INJECTION: forcing a failure. [ 3241.429973] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.431341] CPU: 1 PID: 16285 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3241.432086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.432970] Call Trace: [ 3241.433257] dump_stack+0x107/0x167 [ 3241.433653] should_fail.cold+0x5/0xa [ 3241.434065] ? create_object.isra.0+0x3a/0xa30 [ 3241.434552] should_failslab+0x5/0x20 [ 3241.434963] kmem_cache_alloc+0x5b/0x310 [ 3241.435411] create_object.isra.0+0x3a/0xa30 [ 3241.435883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.436430] kmem_cache_alloc_trace+0x151/0x320 [ 3241.436934] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3241.437447] ? lock_chain_count+0x20/0x20 [ 3241.437893] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.438438] ? do_swap+0x134/0x210 [ 3241.438818] ? sort_r+0x239/0x360 [ 3241.439194] ? ext4_file_open+0xa50/0xa50 [ 3241.439641] ext4_getfsmap+0x695/0x990 [ 3241.440056] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.440602] ? ext4_fsmap_to_internal+0x260/0x260 [ 3241.441114] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3241.441677] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.442228] ext4_ioc_getfsmap+0x2b0/0x620 [ 3241.442678] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3241.443168] ? find_held_lock+0x2c/0x110 [ 3241.443611] ? avc_has_extended_perms+0x675/0xf40 [ 3241.444143] ? lock_downgrade+0x6d0/0x6d0 [ 3241.444591] __ext4_ioctl+0x8ad/0x4220 [ 3241.445014] ? ext4_reset_inode_seed+0x450/0x450 [ 3241.445521] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.446081] ? find_held_lock+0x2c/0x110 [ 3241.446522] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3241.447145] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3241.447694] ? do_vfs_ioctl+0x283/0x10d0 [ 3241.448126] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3241.448683] ? generic_block_fiemap+0x60/0x60 [ 3241.449159] ? lock_downgrade+0x6d0/0x6d0 [ 3241.449600] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3241.450114] ? wait_for_completion_io+0x270/0x270 [ 3241.450633] ? selinux_file_ioctl+0xb6/0x270 [ 3241.451107] ? __ext4_ioctl+0x4220/0x4220 [ 3241.451550] __x64_sys_ioctl+0x19a/0x210 [ 3241.451985] do_syscall_64+0x33/0x40 [ 3241.452382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.452931] RIP: 0033:0x7f81caa8db19 [ 3241.453327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.455286] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3241.456099] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3241.456855] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3241.457611] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.458367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3241.459129] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3241.468738] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3241.472380] FAULT_INJECTION: forcing a failure. [ 3241.472380] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.473636] CPU: 1 PID: 16290 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3241.474388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.475290] Call Trace: [ 3241.475576] dump_stack+0x107/0x167 [ 3241.475967] should_fail.cold+0x5/0xa [ 3241.476380] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3241.476895] should_failslab+0x5/0x20 [ 3241.477305] kmem_cache_alloc_trace+0x55/0x320 [ 3241.477797] ? ext4_bg_num_gdb+0x172/0x250 [ 3241.478254] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3241.478767] ? lock_chain_count+0x20/0x20 [ 3241.479222] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.479773] ? do_swap+0x134/0x210 [ 3241.480160] ? sort_r+0x239/0x360 [ 3241.480538] ? ext4_file_open+0xa50/0xa50 [ 3241.480986] ext4_getfsmap+0x695/0x990 [ 3241.481433] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.481990] ? ext4_fsmap_to_internal+0x260/0x260 [ 3241.482549] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3241.483121] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3241.483713] ext4_ioc_getfsmap+0x2b0/0x620 [ 3241.484168] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3241.484659] ? find_held_lock+0x2c/0x110 [ 3241.485098] ? avc_has_extended_perms+0x675/0xf40 [ 3241.485637] ? lock_downgrade+0x6d0/0x6d0 [ 3241.486086] __ext4_ioctl+0x8ad/0x4220 [ 3241.486536] ? ext4_reset_inode_seed+0x450/0x450 [ 3241.487046] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.487658] ? find_held_lock+0x2c/0x110 [ 3241.488103] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3241.488759] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3241.489315] ? do_vfs_ioctl+0x283/0x10d0 [ 3241.489785] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3241.490379] ? generic_block_fiemap+0x60/0x60 [ 3241.490909] ? lock_downgrade+0x6d0/0x6d0 [ 3241.491402] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3241.491974] ? wait_for_completion_io+0x270/0x270 [ 3241.492532] ? selinux_file_ioctl+0xb6/0x270 [ 3241.493052] ? __ext4_ioctl+0x4220/0x4220 [ 3241.493547] __x64_sys_ioctl+0x19a/0x210 [ 3241.494031] do_syscall_64+0x33/0x40 [ 3241.494462] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.495054] RIP: 0033:0x7f7edf809b19 [ 3241.495503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.497696] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3241.498601] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3241.499455] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3241.500298] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.501151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3241.501999] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 19:41:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 71) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 75) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:39 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 99) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:39 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x2, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:41:39 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 67) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:39 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x6}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:41:39 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3dc, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:41:39 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r3, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3253.983617] FAULT_INJECTION: forcing a failure. [ 3253.983617] name failslab, interval 1, probability 0, space 0, times 0 [ 3253.985045] CPU: 0 PID: 16304 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3253.985821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3253.986738] Call Trace: [ 3253.987043] dump_stack+0x107/0x167 [ 3253.987464] should_fail.cold+0x5/0xa [ 3253.987888] ? create_object.isra.0+0x3a/0xa30 [ 3253.988394] should_failslab+0x5/0x20 [ 3253.988817] kmem_cache_alloc+0x5b/0x310 [ 3253.989268] create_object.isra.0+0x3a/0xa30 [ 3253.989753] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3253.990315] kmem_cache_alloc_trace+0x151/0x320 [ 3253.990832] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3253.991370] ? lock_chain_count+0x20/0x20 [ 3253.991832] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3253.992411] ? do_swap+0x134/0x210 [ 3253.992806] ? sort_r+0x239/0x360 [ 3253.993197] ? ext4_file_open+0xa50/0xa50 [ 3253.993671] ext4_getfsmap+0x695/0x990 [ 3253.994106] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3253.994676] ? ext4_fsmap_to_internal+0x260/0x260 [ 3253.995211] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3253.995816] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3253.996390] ext4_ioc_getfsmap+0x2b0/0x620 [ 3253.996851] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3253.997351] ? find_held_lock+0x2c/0x110 [ 3253.997805] ? avc_has_extended_perms+0x675/0xf40 [ 3253.998354] ? lock_downgrade+0x6d0/0x6d0 [ 3253.998814] __ext4_ioctl+0x8ad/0x4220 [ 3253.999261] ? ext4_reset_inode_seed+0x450/0x450 [ 3253.999445] FAULT_INJECTION: forcing a failure. [ 3253.999445] name failslab, interval 1, probability 0, space 0, times 0 [ 3253.999790] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3253.999803] ? find_held_lock+0x2c/0x110 [ 3253.999825] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3254.003872] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3254.004441] ? do_vfs_ioctl+0x283/0x10d0 [ 3254.004887] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3254.005462] ? generic_block_fiemap+0x60/0x60 [ 3254.005951] ? lock_downgrade+0x6d0/0x6d0 [ 3254.006411] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3254.006938] ? wait_for_completion_io+0x270/0x270 [ 3254.007487] ? selinux_file_ioctl+0xb6/0x270 [ 3254.007969] ? __ext4_ioctl+0x4220/0x4220 [ 3254.008426] __x64_sys_ioctl+0x19a/0x210 [ 3254.008874] do_syscall_64+0x33/0x40 [ 3254.009283] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.009843] RIP: 0033:0x7fcaa5e39b19 [ 3254.010252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3254.012281] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3254.013113] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3254.013901] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3254.014682] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3254.015480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3254.016253] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3254.017061] CPU: 1 PID: 16311 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3254.018533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3254.020308] FAULT_INJECTION: forcing a failure. [ 3254.020308] name failslab, interval 1, probability 0, space 0, times 0 [ 3254.022592] Call Trace: [ 3254.023146] dump_stack+0x107/0x167 [ 3254.023925] should_fail.cold+0x5/0xa [ 3254.024723] ? create_object.isra.0+0x3a/0xa30 [ 3254.025674] should_failslab+0x5/0x20 [ 3254.026468] kmem_cache_alloc+0x5b/0x310 [ 3254.027333] ? lock_downgrade+0x6d0/0x6d0 [ 3254.028205] create_object.isra.0+0x3a/0xa30 [ 3254.029119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3254.030188] kmem_cache_alloc_trace+0x151/0x320 [ 3254.031165] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3254.032167] ? lock_chain_count+0x20/0x20 [ 3254.033032] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.034109] ? do_swap+0x134/0x210 [ 3254.034877] ? sort_r+0x239/0x360 [ 3254.035634] ? ext4_file_open+0xa50/0xa50 [ 3254.036513] ext4_getfsmap+0x695/0x990 [ 3254.037397] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.038469] ? ext4_fsmap_to_internal+0x260/0x260 [ 3254.039489] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3254.040590] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.041674] ext4_ioc_getfsmap+0x2b0/0x620 [ 3254.042560] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3254.043521] ? find_held_lock+0x2c/0x110 [ 3254.044383] ? avc_has_extended_perms+0x675/0xf40 [ 3254.045432] __ext4_ioctl+0x8ad/0x4220 [ 3254.046259] ? ext4_reset_inode_seed+0x450/0x450 [ 3254.047256] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3254.048361] ? find_held_lock+0x2c/0x110 [ 3254.049220] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3254.050432] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3254.051518] ? do_vfs_ioctl+0x283/0x10d0 [ 3254.052364] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3254.053455] ? generic_block_fiemap+0x60/0x60 [ 3254.054397] ? lock_downgrade+0x6d0/0x6d0 [ 3254.055270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3254.056277] ? wait_for_completion_io+0x270/0x270 [ 3254.057307] ? selinux_file_ioctl+0xb6/0x270 [ 3254.058224] ? __ext4_ioctl+0x4220/0x4220 [ 3254.059091] __x64_sys_ioctl+0x19a/0x210 [ 3254.059958] do_syscall_64+0x33/0x40 [ 3254.060745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.061826] RIP: 0033:0x7f7edf809b19 [ 3254.062605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3254.066473] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3254.068069] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3254.069575] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3254.071061] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3254.072562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3254.074052] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 [ 3254.075567] CPU: 0 PID: 16309 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3254.076329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3254.077221] Call Trace: [ 3254.077509] dump_stack+0x107/0x167 [ 3254.077901] should_fail.cold+0x5/0xa [ 3254.078315] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3254.078840] should_failslab+0x5/0x20 [ 3254.079279] kmem_cache_alloc_trace+0x55/0x320 [ 3254.079790] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3254.080337] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3254.080841] ? lock_chain_count+0x20/0x20 [ 3254.081286] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.081831] ? do_swap+0x134/0x210 [ 3254.082212] ? sort_r+0x239/0x360 [ 3254.082590] ? ext4_file_open+0xa50/0xa50 [ 3254.083036] ext4_getfsmap+0x695/0x990 [ 3254.083471] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.084014] ? ext4_fsmap_to_internal+0x260/0x260 [ 3254.084532] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3254.085097] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.085652] ext4_ioc_getfsmap+0x2b0/0x620 [ 3254.086104] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3254.086594] ? find_held_lock+0x2c/0x110 [ 3254.087032] ? avc_has_extended_perms+0x675/0xf40 [ 3254.087582] ? lock_downgrade+0x6d0/0x6d0 [ 3254.088028] __ext4_ioctl+0x8ad/0x4220 [ 3254.088458] ? ext4_reset_inode_seed+0x450/0x450 [ 3254.088968] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3254.089529] ? find_held_lock+0x2c/0x110 [ 3254.089973] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3254.090348] loop4: detected capacity change from 0 to 32768 [ 3254.090587] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3254.090606] ? do_vfs_ioctl+0x283/0x10d0 [ 3254.092819] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3254.093379] ? generic_block_fiemap+0x60/0x60 [ 3254.093857] ? lock_downgrade+0x6d0/0x6d0 [ 3254.094303] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3254.094817] ? wait_for_completion_io+0x270/0x270 [ 3254.095351] ? selinux_file_ioctl+0xb6/0x270 [ 3254.095827] ? __ext4_ioctl+0x4220/0x4220 [ 3254.096272] __x64_sys_ioctl+0x19a/0x210 [ 3254.096708] do_syscall_64+0x33/0x40 [ 3254.097108] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.097656] RIP: 0033:0x7fb4d3c71b19 [ 3254.098052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3254.099843] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3254.100021] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3254.102569] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3254.103346] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3254.104103] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3254.104872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3254.105632] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3254.122805] FAULT_INJECTION: forcing a failure. [ 3254.122805] name failslab, interval 1, probability 0, space 0, times 0 [ 3254.125374] CPU: 1 PID: 16312 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3254.126837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3254.128587] Call Trace: [ 3254.129145] dump_stack+0x107/0x167 [ 3254.129915] should_fail.cold+0x5/0xa [ 3254.130713] ? create_object.isra.0+0x3a/0xa30 [ 3254.131676] should_failslab+0x5/0x20 [ 3254.132474] kmem_cache_alloc+0x5b/0x310 [ 3254.133333] create_object.isra.0+0x3a/0xa30 [ 3254.134256] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3254.135331] kmem_cache_alloc_trace+0x151/0x320 [ 3254.136317] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3254.137307] ? lock_chain_count+0x20/0x20 [ 3254.138174] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.139256] ? do_swap+0x134/0x210 [ 3254.140009] ? sort_r+0x239/0x360 [ 3254.140732] ? ext4_file_open+0xa50/0xa50 [ 3254.141603] ext4_getfsmap+0x695/0x990 [ 3254.142416] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.143501] ? ext4_fsmap_to_internal+0x260/0x260 [ 3254.144530] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3254.145639] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.146728] ext4_ioc_getfsmap+0x2b0/0x620 [ 3254.147628] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3254.148592] ? find_held_lock+0x2c/0x110 19:41:39 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 100) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3254.149454] ? avc_has_extended_perms+0x675/0xf40 [ 3254.150700] ? lock_downgrade+0x6d0/0x6d0 [ 3254.151047] FAULT_INJECTION: forcing a failure. [ 3254.151047] name failslab, interval 1, probability 0, space 0, times 0 [ 3254.151588] __ext4_ioctl+0x8ad/0x4220 [ 3254.151618] ? ext4_reset_inode_seed+0x450/0x450 [ 3254.151642] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3254.155694] ? find_held_lock+0x2c/0x110 [ 3254.156566] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3254.157777] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3254.158867] ? do_vfs_ioctl+0x283/0x10d0 [ 3254.159728] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3254.160826] ? generic_block_fiemap+0x60/0x60 [ 3254.161771] ? lock_downgrade+0x6d0/0x6d0 [ 3254.162646] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3254.163691] ? wait_for_completion_io+0x270/0x270 [ 3254.164728] ? selinux_file_ioctl+0xb6/0x270 [ 3254.165657] ? __ext4_ioctl+0x4220/0x4220 [ 3254.166530] __x64_sys_ioctl+0x19a/0x210 [ 3254.167396] do_syscall_64+0x33/0x40 [ 3254.168185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.169275] RIP: 0033:0x7f81caa8db19 [ 3254.170060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3254.173958] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3254.175567] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3254.177065] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3254.178564] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3254.180077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3254.181583] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3254.183108] CPU: 0 PID: 16327 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 3254.183877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3254.184827] Call Trace: [ 3254.185119] dump_stack+0x107/0x167 [ 3254.185515] should_fail.cold+0x5/0xa [ 3254.185959] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3254.186478] should_failslab+0x5/0x20 [ 3254.186917] kmem_cache_alloc_trace+0x55/0x320 [ 3254.187414] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3254.187997] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3254.188506] ? lock_chain_count+0x20/0x20 [ 3254.188959] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.189519] ? do_swap+0x134/0x210 [ 3254.189909] ? sort_r+0x239/0x360 [ 3254.190282] ? ext4_file_open+0xa50/0xa50 [ 3254.190757] ext4_getfsmap+0x695/0x990 [ 3254.191177] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.191767] ? ext4_fsmap_to_internal+0x260/0x260 [ 3254.192287] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3254.192858] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.193413] ext4_ioc_getfsmap+0x2b0/0x620 [ 3254.193872] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3254.194362] ? find_held_lock+0x2c/0x110 [ 3254.194828] ? avc_has_extended_perms+0x675/0xf40 [ 3254.195372] ? lock_downgrade+0x6d0/0x6d0 [ 3254.195818] __ext4_ioctl+0x8ad/0x4220 [ 3254.196240] ? ext4_reset_inode_seed+0x450/0x450 [ 3254.196754] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3254.197314] ? find_held_lock+0x2c/0x110 [ 3254.197789] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3254.198406] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3254.198959] ? do_vfs_ioctl+0x283/0x10d0 [ 3254.199399] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3254.200001] ? generic_block_fiemap+0x60/0x60 [ 3254.200481] ? lock_downgrade+0x6d0/0x6d0 [ 3254.200924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3254.201440] ? wait_for_completion_io+0x270/0x270 [ 3254.201959] ? selinux_file_ioctl+0xb6/0x270 [ 3254.202430] ? __ext4_ioctl+0x4220/0x4220 [ 3254.202904] __x64_sys_ioctl+0x19a/0x210 [ 3254.203350] do_syscall_64+0x33/0x40 [ 3254.203771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.204324] RIP: 0033:0x7f7edf809b19 [ 3254.204748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3254.206715] RSP: 002b:00007f7edcd7f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3254.207593] RAX: ffffffffffffffda RBX: 00007f7edf91cf60 RCX: 00007f7edf809b19 [ 3254.208402] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3254.209219] RBP: 00007f7edcd7f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3254.210032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3254.210845] R13: 00007ffe8c54ccaf R14: 00007f7edcd7f300 R15: 0000000000022000 19:41:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 76) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 72) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:39 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x7}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3254.280749] FAULT_INJECTION: forcing a failure. [ 3254.280749] name failslab, interval 1, probability 0, space 0, times 0 [ 3254.283377] CPU: 1 PID: 16335 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3254.284861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3254.286619] Call Trace: [ 3254.287188] dump_stack+0x107/0x167 [ 3254.287970] should_fail.cold+0x5/0xa [ 3254.288780] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3254.289794] should_failslab+0x5/0x20 [ 3254.290592] kmem_cache_alloc_trace+0x55/0x320 [ 3254.291559] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3254.292625] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3254.293608] ? lock_chain_count+0x20/0x20 [ 3254.294481] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.295563] ? do_swap+0x134/0x210 [ 3254.296319] ? sort_r+0x239/0x360 [ 3254.297046] ? ext4_file_open+0xa50/0xa50 [ 3254.297920] ext4_getfsmap+0x695/0x990 [ 3254.298738] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.299807] ? ext4_fsmap_to_internal+0x260/0x260 [ 3254.300814] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3254.301969] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.303297] ext4_ioc_getfsmap+0x2b0/0x620 [ 3254.304180] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3254.305134] ? find_held_lock+0x2c/0x110 [ 3254.305990] ? avc_has_extended_perms+0x675/0xf40 [ 3254.307032] ? lock_downgrade+0x6d0/0x6d0 [ 3254.307911] __ext4_ioctl+0x8ad/0x4220 [ 3254.308738] ? ext4_reset_inode_seed+0x450/0x450 [ 3254.309728] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3254.310845] ? find_held_lock+0x2c/0x110 [ 3254.311731] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3254.312942] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3254.314033] ? do_vfs_ioctl+0x283/0x10d0 [ 3254.314884] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3254.315997] ? generic_block_fiemap+0x60/0x60 [ 3254.316937] ? lock_downgrade+0x6d0/0x6d0 [ 3254.317809] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3254.318825] ? wait_for_completion_io+0x270/0x270 [ 3254.319863] ? selinux_file_ioctl+0xb6/0x270 [ 3254.320796] ? __ext4_ioctl+0x4220/0x4220 [ 3254.321670] __x64_sys_ioctl+0x19a/0x210 [ 3254.322524] do_syscall_64+0x33/0x40 [ 3254.323324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.324398] RIP: 0033:0x7f81caa8db19 [ 3254.325183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3254.329043] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3254.330662] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3254.332178] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3254.333675] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3254.335173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3254.336678] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3254.341401] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:41:39 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3de, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:41:39 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000400)="beedb81ac1ef1751f7a137964a5a22ea0b1103f40fc52d03918c5f5d7da905c361e6dcc712bbc97c341d757f27da370c304611ff33668af5c2f360da844d618ddd9f3b3775f1207c071b71831a76e951718ff20e5a408abf72d17a9917bc0e794eac0e18c7d34191bca4f3aa3cc5ca15acf0bd2ff6908e6aa52e0e45821ba9a923", 0x81, 0xb59}, {&(0x7f00000004c0)="8df061e0f8a108b2facc1d40930acbd7b88459374e7077206ed9a057e39b5e1a6d41addaf14585d0dce8db5a82cedb0fb667e38312ee5811160e2199467de3cb450fd6b703a2a39930ec581e34564fac0f4ac215a8dfb5c4029acee20a07477043e854987ee0ad1b84d7b1a1a49d97b2d5380689f6c5ed35654d688ebabd35b18ab041c2918eb2fb499c90228eca4c6efa25dcbc8353c964893b2bfbfa138f93472b6b45fe5b9034601071eceace7570aa16fa79e726c0e7f278aac1", 0xbc, 0xb923}], 0x6000, &(0x7f0000000400)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4008, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x32d, 0x8, 0x5, 0x100, 0x2, 0x80}, {0x5, 0x20, 0xeaf9, 0x20, 0x1, 0x10001}], ['\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), &(0x7f00000006c0)='./file0\x00', 0x2, 0x400, 0x1}, 0x1) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:41:39 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f3b000e900c351906c8209fe7983601d979e4e66a6d471e2282c75677ebcd1af5e7fbae4b242f10e11a6dc8f6b6c0d9695db01899d43ea", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3254.385419] loop4: detected capacity change from 0 to 94720 19:41:39 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3e9, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3254.403395] loop4: detected capacity change from 0 to 94720 [ 3254.409477] FAULT_INJECTION: forcing a failure. [ 3254.409477] name failslab, interval 1, probability 0, space 0, times 0 [ 3254.412097] CPU: 1 PID: 16344 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3254.413561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3254.415336] Call Trace: [ 3254.415896] dump_stack+0x107/0x167 [ 3254.416667] should_fail.cold+0x5/0xa [ 3254.417471] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3254.418513] should_failslab+0x5/0x20 [ 3254.419323] kmem_cache_alloc_trace+0x55/0x320 [ 3254.420291] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3254.421365] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3254.422388] ? lock_chain_count+0x20/0x20 [ 3254.423273] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.424351] ? do_swap+0x134/0x210 [ 3254.425101] ? sort_r+0x239/0x360 [ 3254.425829] ? ext4_file_open+0xa50/0xa50 [ 3254.426746] ext4_getfsmap+0x695/0x990 [ 3254.427580] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.428649] ? ext4_fsmap_to_internal+0x260/0x260 [ 3254.429659] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3254.430767] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.431856] ext4_ioc_getfsmap+0x2b0/0x620 [ 3254.432748] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3254.433702] ? find_held_lock+0x2c/0x110 [ 3254.434561] ? avc_has_extended_perms+0x675/0xf40 [ 3254.435673] ? lock_downgrade+0x6d0/0x6d0 [ 3254.436576] __ext4_ioctl+0x8ad/0x4220 [ 3254.437407] ? ext4_reset_inode_seed+0x450/0x450 [ 3254.438402] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3254.439519] ? find_held_lock+0x2c/0x110 [ 3254.440393] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3254.441609] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3254.442691] ? do_vfs_ioctl+0x283/0x10d0 [ 3254.443565] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3254.444665] ? generic_block_fiemap+0x60/0x60 [ 3254.445610] ? lock_downgrade+0x6d0/0x6d0 [ 3254.446481] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3254.447519] ? wait_for_completion_io+0x270/0x270 [ 3254.448537] ? selinux_file_ioctl+0xb6/0x270 [ 3254.449468] ? __ext4_ioctl+0x4220/0x4220 [ 3254.450369] __x64_sys_ioctl+0x19a/0x210 [ 3254.451241] do_syscall_64+0x33/0x40 [ 3254.452026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.453113] RIP: 0033:0x7fcaa5e39b19 [ 3254.453901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3254.457784] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3254.459406] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3254.460919] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3254.462424] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3254.463950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3254.465443] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:41:39 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:41:39 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:39 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 68) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:39 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3fe, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3254.586987] FAULT_INJECTION: forcing a failure. [ 3254.586987] name failslab, interval 1, probability 0, space 0, times 0 [ 3254.589582] CPU: 1 PID: 16367 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3254.591044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3254.592789] Call Trace: [ 3254.593346] dump_stack+0x107/0x167 [ 3254.594120] should_fail.cold+0x5/0xa [ 3254.594926] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3254.595951] should_failslab+0x5/0x20 [ 3254.596761] kmem_cache_alloc_trace+0x55/0x320 [ 3254.597725] ? ext4_get_group_desc+0x2a0/0x560 [ 3254.598685] ext4_getfsmap_datadev+0x719/0x25c0 [ 3254.599677] ? lock_chain_count+0x20/0x20 [ 3254.600555] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.601646] ? do_swap+0x134/0x210 [ 3254.602391] ? sort_r+0x239/0x360 [ 3254.603115] ? ext4_file_open+0xa50/0xa50 [ 3254.603999] ext4_getfsmap+0x695/0x990 [ 3254.604830] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.605890] ? ext4_fsmap_to_internal+0x260/0x260 [ 3254.606896] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3254.608008] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3254.609094] ext4_ioc_getfsmap+0x2b0/0x620 [ 3254.609976] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3254.610944] ? find_held_lock+0x2c/0x110 [ 3254.611811] ? avc_has_extended_perms+0x675/0xf40 [ 3254.612855] ? lock_downgrade+0x6d0/0x6d0 [ 3254.613734] __ext4_ioctl+0x8ad/0x4220 [ 3254.614554] ? ext4_reset_inode_seed+0x450/0x450 [ 3254.615569] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3254.616665] ? find_held_lock+0x2c/0x110 [ 3254.617523] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3254.618726] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3254.619824] ? do_vfs_ioctl+0x283/0x10d0 [ 3254.620676] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3254.621766] ? generic_block_fiemap+0x60/0x60 [ 3254.622712] ? lock_downgrade+0x6d0/0x6d0 [ 3254.623602] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3254.624613] ? wait_for_completion_io+0x270/0x270 [ 3254.625629] ? selinux_file_ioctl+0xb6/0x270 [ 3254.626552] ? __ext4_ioctl+0x4220/0x4220 [ 3254.627429] __x64_sys_ioctl+0x19a/0x210 [ 3254.628283] do_syscall_64+0x33/0x40 [ 3254.629063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.630127] RIP: 0033:0x7fb4d3c71b19 [ 3254.630919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3254.634772] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3254.636382] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3254.637886] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3254.639393] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3254.640881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3254.642385] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:41:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 77) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:51 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x903, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:41:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 73) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 69) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:41:51 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x9}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:41:51 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0, 0xc}, 0x4004, 0x4, 0x0, 0x5, 0xf31, 0x9, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x400, 0x0) r3 = open$dir(&(0x7f0000000200)='./file2\x00', 0x600000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) dup2(r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d0300000800000005000000000000000001000000000000020000000000000080000000000000000000000000000000000000000000000000000000000000000500000020000000f9ea0000000000002000000000000000010000000000000001000100"/369]) socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001840)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='/\\-#+\x00', 0x6, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) syz_io_uring_setup(0x8001, &(0x7f0000000000)={0x0, 0x5ff6, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 3265.988072] FAULT_INJECTION: forcing a failure. [ 3265.988072] name failslab, interval 1, probability 0, space 0, times 0 [ 3265.989795] CPU: 0 PID: 16380 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3265.990755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3265.991822] Call Trace: [ 3265.992130] dump_stack+0x107/0x167 [ 3265.992543] should_fail.cold+0x5/0xa [ 3265.992977] ? create_object.isra.0+0x3a/0xa30 [ 3265.993494] should_failslab+0x5/0x20 [ 3265.993924] kmem_cache_alloc+0x5b/0x310 19:41:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3265.994383] create_object.isra.0+0x3a/0xa30 [ 3265.994992] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3265.995568] kmem_cache_alloc_trace+0x151/0x320 [ 3265.996243] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3265.996988] ? lock_chain_count+0x20/0x20 [ 3265.997604] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3265.998365] ? do_swap+0x134/0x210 [ 3265.998901] ? sort_r+0x239/0x360 [ 3265.999442] ? ext4_file_open+0xa50/0xa50 [ 3266.000065] ext4_getfsmap+0x695/0x990 [ 3266.000646] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.001403] ? ext4_fsmap_to_internal+0x260/0x260 [ 3266.002122] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3266.002918] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.003710] ext4_ioc_getfsmap+0x2b0/0x620 [ 3266.004338] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3266.005016] ? find_held_lock+0x2c/0x110 [ 3266.005632] ? avc_has_extended_perms+0x675/0xf40 [ 3266.006377] ? lock_downgrade+0x6d0/0x6d0 [ 3266.006996] __ext4_ioctl+0x8ad/0x4220 [ 3266.007612] ? ext4_reset_inode_seed+0x450/0x450 [ 3266.008326] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3266.009107] ? find_held_lock+0x2c/0x110 [ 3266.009726] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3266.010587] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3266.011366] ? do_vfs_ioctl+0x283/0x10d0 [ 3266.012003] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3266.012785] ? generic_block_fiemap+0x60/0x60 [ 3266.013454] ? lock_downgrade+0x6d0/0x6d0 [ 3266.014069] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3266.014791] ? wait_for_completion_io+0x270/0x270 [ 3266.015547] ? selinux_file_ioctl+0xb6/0x270 [ 3266.015888] FAULT_INJECTION: forcing a failure. [ 3266.015888] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.016201] ? __ext4_ioctl+0x4220/0x4220 [ 3266.016218] __x64_sys_ioctl+0x19a/0x210 [ 3266.016234] do_syscall_64+0x33/0x40 [ 3266.016248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3266.016258] RIP: 0033:0x7fcaa5e39b19 [ 3266.016272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3266.016279] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3266.016303] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3266.026826] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3266.027904] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3266.028958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3266.030017] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:41:51 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c0050800800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb00000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x7fff, 0x10000, 0x71, 0x0, 0xfffffffd}) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3266.031108] CPU: 1 PID: 16393 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3266.032941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3266.034888] Call Trace: [ 3266.035524] dump_stack+0x107/0x167 [ 3266.036377] should_fail.cold+0x5/0xa [ 3266.037269] ? create_object.isra.0+0x3a/0xa30 [ 3266.038332] should_failslab+0x5/0x20 [ 3266.039230] kmem_cache_alloc+0x5b/0x310 [ 3266.040199] create_object.isra.0+0x3a/0xa30 [ 3266.041221] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3266.042410] kmem_cache_alloc_trace+0x151/0x320 [ 3266.043516] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3266.044617] ? lock_chain_count+0x20/0x20 [ 3266.045586] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.046782] ? do_swap+0x134/0x210 [ 3266.047629] ? sort_r+0x239/0x360 [ 3266.048444] ? ext4_file_open+0xa50/0xa50 [ 3266.049419] ext4_getfsmap+0x695/0x990 [ 3266.050324] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.051524] ? ext4_fsmap_to_internal+0x260/0x260 [ 3266.052647] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3266.053878] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.055077] ext4_ioc_getfsmap+0x2b0/0x620 [ 3266.056073] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3266.057132] ? find_held_lock+0x2c/0x110 [ 3266.058090] ? avc_has_extended_perms+0x675/0xf40 [ 3266.059250] ? lock_downgrade+0x6d0/0x6d0 [ 3266.060230] __ext4_ioctl+0x8ad/0x4220 [ 3266.061152] ? ext4_reset_inode_seed+0x450/0x450 [ 3266.062261] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3266.063495] ? find_held_lock+0x2c/0x110 [ 3266.064461] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3266.065798] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3266.067002] ? do_vfs_ioctl+0x283/0x10d0 [ 3266.067961] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3266.069184] ? generic_block_fiemap+0x60/0x60 [ 3266.070226] ? lock_downgrade+0x6d0/0x6d0 [ 3266.071201] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3266.072342] ? wait_for_completion_io+0x270/0x270 [ 3266.073475] ? selinux_file_ioctl+0xb6/0x270 [ 3266.074510] ? __ext4_ioctl+0x4220/0x4220 [ 3266.075498] __x64_sys_ioctl+0x19a/0x210 [ 3266.076447] do_syscall_64+0x33/0x40 [ 3266.077321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3266.078511] RIP: 0033:0x7f81caa8db19 [ 3266.079391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3266.083655] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3266.085423] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3266.087084] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3266.088742] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3266.090389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3266.092016] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:41:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 74) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3266.096523] loop4: detected capacity change from 0 to 32768 [ 3266.111072] FAULT_INJECTION: forcing a failure. [ 3266.111072] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.112480] CPU: 0 PID: 16384 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3266.113280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3266.114233] Call Trace: [ 3266.114542] dump_stack+0x107/0x167 [ 3266.114959] should_fail.cold+0x5/0xa [ 3266.115405] ? create_object.isra.0+0x3a/0xa30 [ 3266.115928] should_failslab+0x5/0x20 [ 3266.116370] kmem_cache_alloc+0x5b/0x310 [ 3266.116837] ? lock_downgrade+0x6d0/0x6d0 [ 3266.117314] create_object.isra.0+0x3a/0xa30 [ 3266.117819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3266.118401] kmem_cache_alloc_trace+0x151/0x320 [ 3266.118940] ext4_getfsmap_datadev+0x719/0x25c0 [ 3266.119485] ? lock_chain_count+0x20/0x20 [ 3266.119957] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.120546] ? do_swap+0x134/0x210 [ 3266.120954] ? sort_r+0x239/0x360 [ 3266.121352] ? ext4_file_open+0xa50/0xa50 [ 3266.121832] ext4_getfsmap+0x695/0x990 [ 3266.122286] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.122868] ? ext4_fsmap_to_internal+0x260/0x260 [ 3266.123427] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3266.124030] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.124625] ext4_ioc_getfsmap+0x2b0/0x620 [ 3266.125108] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3266.125637] ? find_held_lock+0x2c/0x110 [ 3266.126107] ? avc_has_extended_perms+0x675/0xf40 [ 3266.126676] ? lock_downgrade+0x6d0/0x6d0 [ 3266.127156] __ext4_ioctl+0x8ad/0x4220 [ 3266.127613] ? ext4_reset_inode_seed+0x450/0x450 [ 3266.128156] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3266.128756] ? find_held_lock+0x2c/0x110 [ 3266.129226] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3266.129880] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3266.130473] ? do_vfs_ioctl+0x283/0x10d0 [ 3266.130939] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3266.131545] ? generic_block_fiemap+0x60/0x60 [ 3266.132058] ? lock_downgrade+0x6d0/0x6d0 [ 3266.132536] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3266.133087] ? wait_for_completion_io+0x270/0x270 [ 3266.133644] ? selinux_file_ioctl+0xb6/0x270 [ 3266.134153] ? __ext4_ioctl+0x4220/0x4220 [ 3266.134628] __x64_sys_ioctl+0x19a/0x210 [ 3266.135093] do_syscall_64+0x33/0x40 [ 3266.135527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3266.136112] RIP: 0033:0x7fb4d3c71b19 [ 3266.136538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3266.138652] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3266.139528] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3266.140349] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3266.141167] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3266.141979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3266.142796] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3266.195654] loop4: detected capacity change from 0 to 32768 19:41:51 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) fallocate(0xffffffffffffffff, 0x2c, 0x10000, 0x100000000) 19:41:51 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xa}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3266.201666] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3266.228021] FAULT_INJECTION: forcing a failure. [ 3266.228021] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.229293] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3266.230833] CPU: 1 PID: 16403 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3266.233130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3266.235024] Call Trace: [ 3266.235649] dump_stack+0x107/0x167 [ 3266.236494] should_fail.cold+0x5/0xa [ 3266.237370] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3266.238490] should_failslab+0x5/0x20 [ 3266.239384] kmem_cache_alloc_trace+0x55/0x320 [ 3266.240427] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3266.241594] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3266.242673] ? lock_chain_count+0x20/0x20 [ 3266.243634] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.244804] ? do_swap+0x134/0x210 [ 3266.245626] ? sort_r+0x239/0x360 [ 3266.246428] ? ext4_file_open+0xa50/0xa50 [ 3266.247429] ext4_getfsmap+0x695/0x990 [ 3266.248325] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.249497] ? ext4_fsmap_to_internal+0x260/0x260 [ 3266.250609] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3266.251832] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3266.253019] ext4_ioc_getfsmap+0x2b0/0x620 [ 3266.253993] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3266.255045] ? find_held_lock+0x2c/0x110 [ 3266.255991] ? avc_has_extended_perms+0x675/0xf40 [ 3266.257128] ? lock_downgrade+0x6d0/0x6d0 [ 3266.258083] __ext4_ioctl+0x8ad/0x4220 [ 3266.258984] ? ext4_reset_inode_seed+0x450/0x450 [ 3266.260073] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3266.261264] ? find_held_lock+0x2c/0x110 [ 3266.262206] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3266.263531] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3266.264716] ? do_vfs_ioctl+0x283/0x10d0 [ 3266.265661] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3266.266859] ? generic_block_fiemap+0x60/0x60 [ 3266.267892] ? lock_downgrade+0x6d0/0x6d0 [ 3266.268840] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3266.269938] ? wait_for_completion_io+0x270/0x270 [ 3266.271051] ? selinux_file_ioctl+0xb6/0x270 [ 3266.272074] ? __ext4_ioctl+0x4220/0x4220 [ 3266.273024] __x64_sys_ioctl+0x19a/0x210 [ 3266.273956] do_syscall_64+0x33/0x40 [ 3266.274814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3266.276000] RIP: 0033:0x7fcaa5e39b19 [ 3266.276859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3266.281060] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3266.282812] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3266.284449] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3266.286086] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3266.287716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3266.289344] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:42:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 75) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:03 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:42:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 78) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x4b47, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 70) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:03 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa00, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:03 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xf, "8a7e3c59a411b6"}) [ 3278.176620] blktrace: Concurrent blktraces are not allowed on loop8 19:42:03 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3278.206473] FAULT_INJECTION: forcing a failure. [ 3278.206473] name failslab, interval 1, probability 0, space 0, times 0 [ 3278.209165] CPU: 1 PID: 16443 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3278.210697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3278.212551] Call Trace: [ 3278.213136] dump_stack+0x107/0x167 [ 3278.213935] should_fail.cold+0x5/0xa [ 3278.214774] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3278.215845] should_failslab+0x5/0x20 [ 3278.216689] kmem_cache_alloc_trace+0x55/0x320 [ 3278.217691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3278.218809] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3278.219855] ? lock_chain_count+0x20/0x20 [ 3278.220762] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.221879] ? do_swap+0x134/0x210 [ 3278.222721] ? sort_r+0x239/0x360 [ 3278.223583] ? ext4_file_open+0xa50/0xa50 [ 3278.224496] ext4_getfsmap+0x695/0x990 [ 3278.225357] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.226464] ? ext4_fsmap_to_internal+0x260/0x260 [ 3278.227536] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3278.228691] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.229839] ext4_ioc_getfsmap+0x2b0/0x620 [ 3278.230765] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3278.231785] ? find_held_lock+0x2c/0x110 [ 3278.232678] ? avc_has_extended_perms+0x675/0xf40 [ 3278.233767] ? lock_downgrade+0x6d0/0x6d0 [ 3278.234676] __ext4_ioctl+0x8ad/0x4220 [ 3278.235549] ? ext4_reset_inode_seed+0x450/0x450 [ 3278.236580] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3278.237719] ? find_held_lock+0x2c/0x110 [ 3278.238614] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3278.239875] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3278.240996] ? do_vfs_ioctl+0x283/0x10d0 [ 3278.241882] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3278.243020] ? generic_block_fiemap+0x60/0x60 [ 3278.244012] ? lock_downgrade+0x6d0/0x6d0 [ 3278.244906] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3278.245954] ? wait_for_completion_io+0x270/0x270 [ 3278.247005] ? selinux_file_ioctl+0xb6/0x270 [ 3278.247978] ? __ext4_ioctl+0x4220/0x4220 [ 3278.248872] __x64_sys_ioctl+0x19a/0x210 [ 3278.249756] do_syscall_64+0x33/0x40 [ 3278.250566] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3278.251686] RIP: 0033:0x7fcaa5e39b19 [ 3278.252498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3278.256478] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3278.258100] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3278.259626] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3278.261137] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3278.262635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3278.264162] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:42:03 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:42:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x4b49, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3278.290562] FAULT_INJECTION: forcing a failure. [ 3278.290562] name failslab, interval 1, probability 0, space 0, times 0 [ 3278.293033] CPU: 0 PID: 16442 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3278.294487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3278.296234] Call Trace: [ 3278.296799] dump_stack+0x107/0x167 [ 3278.297564] should_fail.cold+0x5/0xa [ 3278.298365] ? create_object.isra.0+0x3a/0xa30 [ 3278.299320] should_failslab+0x5/0x20 [ 3278.300131] kmem_cache_alloc+0x5b/0x310 [ 3278.300985] create_object.isra.0+0x3a/0xa30 [ 3278.301906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3278.302979] kmem_cache_alloc_trace+0x151/0x320 [ 3278.303975] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3278.304968] ? lock_chain_count+0x20/0x20 [ 3278.305835] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.306911] ? do_swap+0x134/0x210 [ 3278.307665] ? sort_r+0x239/0x360 [ 3278.308391] ? ext4_file_open+0xa50/0xa50 [ 3278.309267] ext4_getfsmap+0x695/0x990 [ 3278.310080] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.311145] ? ext4_fsmap_to_internal+0x260/0x260 [ 3278.312166] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3278.313281] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.314361] ext4_ioc_getfsmap+0x2b0/0x620 [ 3278.315250] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3278.316221] ? find_held_lock+0x2c/0x110 [ 3278.317078] ? avc_has_extended_perms+0x675/0xf40 [ 3278.318123] ? lock_downgrade+0x6d0/0x6d0 [ 3278.318989] __ext4_ioctl+0x8ad/0x4220 [ 3278.319825] ? ext4_reset_inode_seed+0x450/0x450 [ 3278.320820] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3278.321913] ? find_held_lock+0x2c/0x110 [ 3278.322780] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3278.323997] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3278.325077] ? do_vfs_ioctl+0x283/0x10d0 [ 3278.325926] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3278.327024] ? generic_block_fiemap+0x60/0x60 [ 3278.327970] ? lock_downgrade+0x6d0/0x6d0 [ 3278.328842] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3278.329855] ? wait_for_completion_io+0x270/0x270 [ 3278.330869] ? selinux_file_ioctl+0xb6/0x270 [ 3278.331803] ? __ext4_ioctl+0x4220/0x4220 [ 3278.332672] __x64_sys_ioctl+0x19a/0x210 [ 3278.333525] do_syscall_64+0x33/0x40 [ 3278.334310] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3278.335381] RIP: 0033:0x7f81caa8db19 [ 3278.336171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3278.340025] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3278.341619] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3278.343107] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3278.344609] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3278.346097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3278.347601] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3278.362092] FAULT_INJECTION: forcing a failure. [ 3278.362092] name failslab, interval 1, probability 0, space 0, times 0 [ 3278.364640] CPU: 1 PID: 16440 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3278.366095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3278.367850] Call Trace: [ 3278.368418] dump_stack+0x107/0x167 [ 3278.369185] should_fail.cold+0x5/0xa [ 3278.369999] ? create_object.isra.0+0x3a/0xa30 [ 3278.370966] should_failslab+0x5/0x20 [ 3278.371781] kmem_cache_alloc+0x5b/0x310 [ 3278.372643] ? lock_downgrade+0x6d0/0x6d0 [ 3278.373513] create_object.isra.0+0x3a/0xa30 [ 3278.374436] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3278.375521] kmem_cache_alloc_trace+0x151/0x320 [ 3278.376515] ext4_getfsmap_datadev+0x719/0x25c0 [ 3278.377505] ? lock_chain_count+0x20/0x20 [ 3278.378376] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.379452] ? do_swap+0x134/0x210 [ 3278.380215] ? sort_r+0x239/0x360 [ 3278.380942] ? ext4_file_open+0xa50/0xa50 [ 3278.381817] ext4_getfsmap+0x695/0x990 [ 3278.382638] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.383720] ? ext4_fsmap_to_internal+0x260/0x260 [ 3278.384735] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3278.385849] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.386938] ext4_ioc_getfsmap+0x2b0/0x620 [ 3278.387832] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3278.388798] ? find_held_lock+0x2c/0x110 [ 3278.389662] ? avc_has_extended_perms+0x675/0xf40 [ 3278.390728] ? lock_downgrade+0x6d0/0x6d0 [ 3278.391620] __ext4_ioctl+0x8ad/0x4220 [ 3278.392447] ? ext4_reset_inode_seed+0x450/0x450 [ 3278.393446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3278.394556] ? find_held_lock+0x2c/0x110 [ 3278.395429] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3278.396648] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3278.397730] ? do_vfs_ioctl+0x283/0x10d0 [ 3278.398578] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3278.399685] ? generic_block_fiemap+0x60/0x60 [ 3278.400622] ? lock_downgrade+0x6d0/0x6d0 [ 3278.401491] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3278.402500] ? wait_for_completion_io+0x270/0x270 [ 3278.403534] ? selinux_file_ioctl+0xb6/0x270 [ 3278.404458] ? __ext4_ioctl+0x4220/0x4220 [ 3278.405330] __x64_sys_ioctl+0x19a/0x210 [ 3278.406187] do_syscall_64+0x33/0x40 [ 3278.406970] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3278.408055] RIP: 0033:0x7fb4d3c71b19 [ 3278.408839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3278.412716] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3278.414329] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3278.415835] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3278.417347] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3278.418848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3278.420368] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:42:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 76) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:03 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d9aef96bc7969375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00f8ff28000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 71) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:03 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xb91, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:03 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xc}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3278.583656] FAULT_INJECTION: forcing a failure. [ 3278.583656] name failslab, interval 1, probability 0, space 0, times 0 [ 3278.586153] CPU: 0 PID: 16466 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3278.587628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3278.589369] Call Trace: [ 3278.589930] dump_stack+0x107/0x167 [ 3278.590702] should_fail.cold+0x5/0xa [ 3278.591527] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3278.592540] should_failslab+0x5/0x20 [ 3278.593341] kmem_cache_alloc_trace+0x55/0x320 [ 3278.594299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3278.595377] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3278.596390] ? lock_chain_count+0x20/0x20 [ 3278.597271] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.598352] ? do_swap+0x134/0x210 [ 3278.599109] ? sort_r+0x239/0x360 [ 3278.599852] ? ext4_file_open+0xa50/0xa50 [ 3278.600732] ext4_getfsmap+0x695/0x990 [ 3278.601558] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.602637] ? ext4_fsmap_to_internal+0x260/0x260 [ 3278.603682] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3278.604802] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.605899] ext4_ioc_getfsmap+0x2b0/0x620 [ 3278.606795] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3278.607773] ? find_held_lock+0x2c/0x110 [ 3278.608640] ? avc_has_extended_perms+0x675/0xf40 [ 3278.609702] ? lock_downgrade+0x6d0/0x6d0 [ 3278.610580] __ext4_ioctl+0x8ad/0x4220 [ 3278.611423] ? ext4_reset_inode_seed+0x450/0x450 [ 3278.612445] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3278.613558] ? find_held_lock+0x2c/0x110 [ 3278.614431] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3278.615656] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3278.616748] ? do_vfs_ioctl+0x283/0x10d0 [ 3278.617609] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3278.618719] ? generic_block_fiemap+0x60/0x60 [ 3278.619677] ? lock_downgrade+0x6d0/0x6d0 [ 3278.620565] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3278.621591] ? wait_for_completion_io+0x270/0x270 [ 3278.622621] ? selinux_file_ioctl+0xb6/0x270 [ 3278.623566] ? __ext4_ioctl+0x4220/0x4220 [ 3278.624452] __x64_sys_ioctl+0x19a/0x210 [ 3278.625316] do_syscall_64+0x33/0x40 [ 3278.626107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3278.627194] RIP: 0033:0x7fcaa5e39b19 [ 3278.627995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3278.631914] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3278.633526] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3278.635046] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3278.636082] FAULT_INJECTION: forcing a failure. [ 3278.636082] name failslab, interval 1, probability 0, space 0, times 0 [ 3278.636566] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3278.636578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3278.636589] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:42:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x541b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:04 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 79) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3278.643918] CPU: 1 PID: 16473 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3278.645552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3278.647310] Call Trace: [ 3278.647872] dump_stack+0x107/0x167 [ 3278.648622] should_fail.cold+0x5/0xa [ 3278.649405] ? create_object.isra.0+0x3a/0xa30 [ 3278.650335] should_failslab+0x5/0x20 [ 3278.651110] kmem_cache_alloc+0x5b/0x310 [ 3278.651948] create_object.isra.0+0x3a/0xa30 [ 3278.652846] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3278.653904] kmem_cache_alloc_trace+0x151/0x320 [ 3278.654859] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3278.655841] ? lock_chain_count+0x20/0x20 [ 3278.656688] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.657759] ? do_swap+0x134/0x210 [ 3278.658485] ? sort_r+0x239/0x360 [ 3278.659195] ? ext4_file_open+0xa50/0xa50 [ 3278.660062] ext4_getfsmap+0x695/0x990 [ 3278.660868] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.661930] ? ext4_fsmap_to_internal+0x260/0x260 [ 3278.662942] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3278.664023] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.665087] ext4_ioc_getfsmap+0x2b0/0x620 [ 3278.666001] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3278.666963] ? find_held_lock+0x2c/0x110 [ 3278.667820] ? avc_has_extended_perms+0x675/0xf40 [ 3278.668857] ? lock_downgrade+0x6d0/0x6d0 [ 3278.669714] __ext4_ioctl+0x8ad/0x4220 [ 3278.670527] ? ext4_reset_inode_seed+0x450/0x450 [ 3278.671535] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3278.672641] ? find_held_lock+0x2c/0x110 [ 3278.673503] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3278.674673] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3278.675747] ? do_vfs_ioctl+0x283/0x10d0 [ 3278.676578] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3278.677757] ? generic_block_fiemap+0x60/0x60 [ 3278.678782] ? lock_downgrade+0x6d0/0x6d0 [ 3278.679635] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3278.680622] ? wait_for_completion_io+0x270/0x270 [ 3278.681617] ? selinux_file_ioctl+0xb6/0x270 [ 3278.682511] ? __ext4_ioctl+0x4220/0x4220 [ 3278.683362] __x64_sys_ioctl+0x19a/0x210 [ 3278.684215] do_syscall_64+0x33/0x40 [ 3278.684988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3278.686040] RIP: 0033:0x7fb4d3c71b19 [ 3278.686800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3278.690559] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3278.692144] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3278.693594] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3278.695062] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3278.696521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3278.697981] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:42:04 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:42:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x5421, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3278.873859] FAULT_INJECTION: forcing a failure. [ 3278.873859] name failslab, interval 1, probability 0, space 0, times 0 [ 3278.876385] CPU: 0 PID: 16489 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3278.877841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3278.879593] Call Trace: [ 3278.880155] dump_stack+0x107/0x167 [ 3278.880924] should_fail.cold+0x5/0xa [ 3278.881728] ? create_object.isra.0+0x3a/0xa30 [ 3278.882689] should_failslab+0x5/0x20 [ 3278.883498] kmem_cache_alloc+0x5b/0x310 [ 3278.884357] create_object.isra.0+0x3a/0xa30 [ 3278.885281] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3278.886357] kmem_cache_alloc_trace+0x151/0x320 [ 3278.887343] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3278.888347] ? lock_chain_count+0x20/0x20 [ 3278.889223] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.890300] ? do_swap+0x134/0x210 [ 3278.891050] ? sort_r+0x239/0x360 [ 3278.891791] ? ext4_file_open+0xa50/0xa50 [ 3278.892670] ext4_getfsmap+0x695/0x990 [ 3278.893492] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.894567] ? ext4_fsmap_to_internal+0x260/0x260 [ 3278.895599] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3278.896716] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3278.897811] ext4_ioc_getfsmap+0x2b0/0x620 [ 3278.898703] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3278.899682] ? find_held_lock+0x2c/0x110 [ 3278.900549] ? avc_has_extended_perms+0x675/0xf40 [ 3278.901608] ? lock_downgrade+0x6d0/0x6d0 [ 3278.902485] __ext4_ioctl+0x8ad/0x4220 [ 3278.903320] ? ext4_reset_inode_seed+0x450/0x450 [ 3278.904338] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3278.905451] ? find_held_lock+0x2c/0x110 [ 3278.906326] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3278.907554] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3278.908656] ? do_vfs_ioctl+0x283/0x10d0 [ 3278.909512] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3278.910619] ? generic_block_fiemap+0x60/0x60 [ 3278.911579] ? lock_downgrade+0x6d0/0x6d0 [ 3278.912454] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3278.913477] ? wait_for_completion_io+0x270/0x270 [ 3278.914503] ? selinux_file_ioctl+0xb6/0x270 [ 3278.915434] ? __ext4_ioctl+0x4220/0x4220 [ 3278.916319] __x64_sys_ioctl+0x19a/0x210 [ 3278.917177] do_syscall_64+0x33/0x40 [ 3278.917968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3278.919047] RIP: 0033:0x7f81caa8db19 [ 3278.919834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3278.923721] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3278.925326] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3278.926831] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3278.928346] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3278.929850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3278.931357] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:42:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 77) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 80) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:17 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) 19:42:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x5450, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:17 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xd}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:42:17 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="342d6283f6a36ece00e492bead10184034c6eb013d82cbad031f517a041a733d685750f7a7e4d302b781a26364b6ffc9dcd8733096aa2a7cca6618b7c5b66c1c93e00ee45b0e3e79100647959885230cb807e5d989404ce7457d27a157c13103d060ce4150efd55ba281f2245f878537020000000000000007024d69079c7b", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:17 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 72) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:17 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2000, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3292.054069] FAULT_INJECTION: forcing a failure. [ 3292.054069] name failslab, interval 1, probability 0, space 0, times 0 [ 3292.055484] CPU: 1 PID: 16507 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3292.056248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.057158] Call Trace: [ 3292.057468] dump_stack+0x107/0x167 [ 3292.057886] should_fail.cold+0x5/0xa [ 3292.058326] ? create_object.isra.0+0x3a/0xa30 [ 3292.058851] should_failslab+0x5/0x20 [ 3292.059289] kmem_cache_alloc+0x5b/0x310 [ 3292.059798] create_object.isra.0+0x3a/0xa30 [ 3292.060304] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3292.060891] kmem_cache_alloc_trace+0x151/0x320 [ 3292.061435] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3292.061980] ? lock_chain_count+0x20/0x20 [ 3292.062432] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.062988] ? do_swap+0x134/0x210 [ 3292.063393] ? sort_r+0x239/0x360 [ 3292.063798] ? ext4_file_open+0xa50/0xa50 [ 3292.064257] ext4_getfsmap+0x695/0x990 [ 3292.064681] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.065231] ? ext4_fsmap_to_internal+0x260/0x260 [ 3292.065762] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3292.066343] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.066905] ext4_ioc_getfsmap+0x2b0/0x620 [ 3292.067380] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3292.067881] ? find_held_lock+0x2c/0x110 [ 3292.068327] ? avc_has_extended_perms+0x675/0xf40 [ 3292.068908] ? lock_downgrade+0x6d0/0x6d0 [ 3292.069355] __ext4_ioctl+0x8ad/0x4220 [ 3292.069967] ? ext4_reset_inode_seed+0x450/0x450 [ 3292.070483] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3292.071057] ? find_held_lock+0x2c/0x110 [ 3292.071514] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3292.072190] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3292.072748] ? do_vfs_ioctl+0x283/0x10d0 [ 3292.073215] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3292.073782] ? generic_block_fiemap+0x60/0x60 [ 3292.074298] ? lock_downgrade+0x6d0/0x6d0 [ 3292.074766] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3292.075311] ? wait_for_completion_io+0x270/0x270 [ 3292.075868] ? selinux_file_ioctl+0xb6/0x270 [ 3292.076374] ? __ext4_ioctl+0x4220/0x4220 [ 3292.076822] __x64_sys_ioctl+0x19a/0x210 [ 3292.077271] do_syscall_64+0x33/0x40 [ 3292.077671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.078231] RIP: 0033:0x7fcaa5e39b19 [ 3292.078635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3292.079476] FAULT_INJECTION: forcing a failure. [ 3292.079476] name failslab, interval 1, probability 0, space 0, times 0 [ 3292.080666] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3292.080678] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3292.080685] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3292.080691] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3292.080697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3292.080703] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3292.089054] CPU: 0 PID: 16502 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3292.090102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.091331] Call Trace: [ 3292.091728] dump_stack+0x107/0x167 [ 3292.092251] should_fail.cold+0x5/0xa [ 3292.092801] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3292.093491] should_failslab+0x5/0x20 [ 3292.094054] kmem_cache_alloc_trace+0x55/0x320 [ 3292.094724] ? ext4_bg_num_gdb+0x172/0x250 [ 3292.095353] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3292.096055] ? lock_chain_count+0x20/0x20 [ 3292.096664] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.097411] ? do_swap+0x134/0x210 [ 3292.097945] ? sort_r+0x239/0x360 [ 3292.098444] ? ext4_file_open+0xa50/0xa50 [ 3292.099053] ext4_getfsmap+0x695/0x990 [ 3292.099627] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.100393] ? ext4_fsmap_to_internal+0x260/0x260 [ 3292.101102] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3292.101892] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.102662] ext4_ioc_getfsmap+0x2b0/0x620 [ 3292.103287] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3292.103959] ? find_held_lock+0x2c/0x110 [ 3292.104543] ? avc_has_extended_perms+0x675/0xf40 [ 3292.105271] ? lock_downgrade+0x6d0/0x6d0 [ 3292.105862] __ext4_ioctl+0x8ad/0x4220 [ 3292.106425] ? ext4_reset_inode_seed+0x450/0x450 [ 3292.107110] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3292.107886] ? find_held_lock+0x2c/0x110 [ 3292.108475] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3292.109322] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3292.110089] ? do_vfs_ioctl+0x283/0x10d0 [ 3292.110677] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3292.111444] ? generic_block_fiemap+0x60/0x60 [ 3292.112096] ? lock_downgrade+0x6d0/0x6d0 [ 3292.112693] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3292.113382] ? wait_for_completion_io+0x270/0x270 [ 3292.114081] ? selinux_file_ioctl+0xb6/0x270 [ 3292.114714] ? __ext4_ioctl+0x4220/0x4220 [ 3292.115316] __x64_sys_ioctl+0x19a/0x210 [ 3292.115911] do_syscall_64+0x33/0x40 [ 3292.116454] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.117193] RIP: 0033:0x7f81caa8db19 [ 3292.117726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3292.120402] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3292.121487] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3292.122545] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3292.123594] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3292.124670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3292.125720] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:42:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 78) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3292.152535] FAULT_INJECTION: forcing a failure. 19:42:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x5451, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3292.152535] name failslab, interval 1, probability 0, space 0, times 0 [ 3292.154532] CPU: 0 PID: 16512 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3292.155571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.156815] Call Trace: [ 3292.157210] dump_stack+0x107/0x167 [ 3292.157745] should_fail.cold+0x5/0xa [ 3292.158300] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3292.159017] should_failslab+0x5/0x20 [ 3292.159565] kmem_cache_alloc_trace+0x55/0x320 [ 3292.160229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3292.160972] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3292.161675] ? lock_chain_count+0x20/0x20 [ 3292.162434] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.163176] ? do_swap+0x134/0x210 [ 3292.163714] ? sort_r+0x239/0x360 [ 3292.164221] ? ext4_file_open+0xa50/0xa50 [ 3292.164840] ext4_getfsmap+0x695/0x990 [ 3292.165398] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.166131] ? ext4_fsmap_to_internal+0x260/0x260 [ 3292.166823] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3292.167592] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.167893] FAULT_INJECTION: forcing a failure. [ 3292.167893] name failslab, interval 1, probability 0, space 0, times 0 [ 3292.168353] ext4_ioc_getfsmap+0x2b0/0x620 [ 3292.168367] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3292.168384] ? find_held_lock+0x2c/0x110 [ 3292.171379] ? avc_has_extended_perms+0x675/0xf40 [ 3292.172107] ? lock_downgrade+0x6d0/0x6d0 [ 3292.172713] __ext4_ioctl+0x8ad/0x4220 [ 3292.173287] ? ext4_reset_inode_seed+0x450/0x450 [ 3292.173969] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3292.174717] ? find_held_lock+0x2c/0x110 [ 3292.175321] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3292.176154] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3292.176892] ? do_vfs_ioctl+0x283/0x10d0 [ 3292.177476] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3292.178226] ? generic_block_fiemap+0x60/0x60 [ 3292.178872] ? lock_downgrade+0x6d0/0x6d0 [ 3292.179471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3292.180181] ? wait_for_completion_io+0x270/0x270 [ 3292.180871] ? selinux_file_ioctl+0xb6/0x270 [ 3292.181512] ? __ext4_ioctl+0x4220/0x4220 [ 3292.182103] __x64_sys_ioctl+0x19a/0x210 [ 3292.182686] do_syscall_64+0x33/0x40 [ 3292.183215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.183967] RIP: 0033:0x7fb4d3c71b19 [ 3292.184498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3292.187163] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3292.188264] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3292.189307] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3292.190339] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3292.191374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3292.192416] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3292.193452] CPU: 1 PID: 16529 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3292.194239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.195129] Call Trace: [ 3292.195489] dump_stack+0x107/0x167 [ 3292.195894] should_fail.cold+0x5/0xa [ 3292.196306] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3292.196827] should_failslab+0x5/0x20 [ 3292.197235] kmem_cache_alloc_trace+0x55/0x320 [ 3292.197746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3292.198297] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3292.198801] ? lock_chain_count+0x20/0x20 [ 3292.199279] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.199871] ? do_swap+0x134/0x210 [ 3292.200279] ? sort_r+0x239/0x360 [ 3292.200674] ? ext4_file_open+0xa50/0xa50 [ 3292.201149] ext4_getfsmap+0x695/0x990 [ 3292.201591] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.202140] ? ext4_fsmap_to_internal+0x260/0x260 [ 3292.202689] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3292.203260] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.203844] ext4_ioc_getfsmap+0x2b0/0x620 [ 3292.204329] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3292.204822] ? find_held_lock+0x2c/0x110 [ 3292.205284] ? avc_has_extended_perms+0x675/0xf40 [ 3292.205822] ? lock_downgrade+0x6d0/0x6d0 [ 3292.206271] __ext4_ioctl+0x8ad/0x4220 [ 3292.206703] ? ext4_reset_inode_seed+0x450/0x450 [ 3292.207214] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3292.207781] ? find_held_lock+0x2c/0x110 [ 3292.208224] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3292.208886] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3292.209438] ? do_vfs_ioctl+0x283/0x10d0 [ 3292.209870] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3292.210428] ? generic_block_fiemap+0x60/0x60 [ 3292.210903] ? lock_downgrade+0x6d0/0x6d0 [ 3292.211364] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3292.211908] ? wait_for_completion_io+0x270/0x270 [ 3292.212438] ? selinux_file_ioctl+0xb6/0x270 [ 3292.212908] ? __ext4_ioctl+0x4220/0x4220 [ 3292.213358] __x64_sys_ioctl+0x19a/0x210 [ 3292.213822] do_syscall_64+0x33/0x40 [ 3292.214225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.214769] RIP: 0033:0x7fcaa5e39b19 [ 3292.215193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3292.217204] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3292.218048] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3292.218813] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3292.219578] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3292.220342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3292.221097] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:42:17 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) 19:42:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 81) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3292.294771] FAULT_INJECTION: forcing a failure. [ 3292.294771] name failslab, interval 1, probability 0, space 0, times 0 [ 3292.296132] CPU: 1 PID: 16536 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3292.296924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.297839] Call Trace: [ 3292.298139] dump_stack+0x107/0x167 [ 3292.298532] should_fail.cold+0x5/0xa [ 3292.298947] ? create_object.isra.0+0x3a/0xa30 [ 3292.299434] should_failslab+0x5/0x20 [ 3292.299864] kmem_cache_alloc+0x5b/0x310 [ 3292.300309] ? lock_downgrade+0x6d0/0x6d0 [ 3292.300784] create_object.isra.0+0x3a/0xa30 [ 3292.301260] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3292.301817] kmem_cache_alloc_trace+0x151/0x320 [ 3292.302352] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3292.302861] ? lock_chain_count+0x20/0x20 [ 3292.303305] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.303863] ? do_swap+0x134/0x210 [ 3292.304246] ? sort_r+0x239/0x360 [ 3292.304619] ? ext4_file_open+0xa50/0xa50 [ 3292.305068] ext4_getfsmap+0x695/0x990 [ 3292.305518] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.306068] ? ext4_fsmap_to_internal+0x260/0x260 [ 3292.306588] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3292.307153] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3292.307714] ext4_ioc_getfsmap+0x2b0/0x620 [ 3292.308165] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3292.308654] ? find_held_lock+0x2c/0x110 [ 3292.309093] ? avc_has_extended_perms+0x675/0xf40 [ 3292.309630] ? lock_downgrade+0x6d0/0x6d0 [ 3292.310075] __ext4_ioctl+0x8ad/0x4220 [ 3292.310501] ? ext4_reset_inode_seed+0x450/0x450 [ 3292.311048] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3292.311630] ? find_held_lock+0x2c/0x110 [ 3292.312098] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3292.312755] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3292.313346] ? do_vfs_ioctl+0x283/0x10d0 [ 3292.313781] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3292.314377] ? generic_block_fiemap+0x60/0x60 [ 3292.314864] ? lock_downgrade+0x6d0/0x6d0 [ 3292.315310] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3292.315840] ? wait_for_completion_io+0x270/0x270 [ 3292.316369] ? selinux_file_ioctl+0xb6/0x270 [ 3292.316841] ? __ext4_ioctl+0x4220/0x4220 [ 3292.317288] __x64_sys_ioctl+0x19a/0x210 [ 3292.317752] do_syscall_64+0x33/0x40 [ 3292.318154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.318705] RIP: 0033:0x7f81caa8db19 [ 3292.319130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3292.321112] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3292.321929] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3292.322692] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3292.323457] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3292.324226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3292.324993] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:42:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 82) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:28 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2200, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 79) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x5452, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:28 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) 19:42:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 73) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:28 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xe}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:42:28 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="00edbae8746080b30735669b845824170125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc00000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c7"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xf, "8a7e3c59a411b6"}) [ 3303.076018] FAULT_INJECTION: forcing a failure. [ 3303.076018] name failslab, interval 1, probability 0, space 0, times 0 [ 3303.077692] CPU: 0 PID: 16555 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3303.078714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3303.079952] Call Trace: [ 3303.080342] dump_stack+0x107/0x167 [ 3303.080929] should_fail.cold+0x5/0xa [ 3303.081504] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3303.082212] should_failslab+0x5/0x20 [ 3303.082777] kmem_cache_alloc_trace+0x55/0x320 [ 3303.083453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3303.084215] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3303.084909] ? lock_chain_count+0x20/0x20 [ 3303.085525] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.086283] ? do_swap+0x134/0x210 [ 3303.086816] ? sort_r+0x239/0x360 [ 3303.087332] ? ext4_file_open+0xa50/0xa50 [ 3303.087953] ext4_getfsmap+0x695/0x990 [ 3303.088531] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.089274] ? ext4_fsmap_to_internal+0x260/0x260 [ 3303.089991] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3303.090772] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.091541] ext4_ioc_getfsmap+0x2b0/0x620 [ 3303.092163] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3303.092841] ? find_held_lock+0x2c/0x110 [ 3303.093070] FAULT_INJECTION: forcing a failure. [ 3303.093070] name failslab, interval 1, probability 0, space 0, times 0 [ 3303.093438] ? avc_has_extended_perms+0x675/0xf40 [ 3303.093478] ? lock_downgrade+0x6d0/0x6d0 [ 3303.093493] __ext4_ioctl+0x8ad/0x4220 [ 3303.093511] ? ext4_reset_inode_seed+0x450/0x450 [ 3303.093525] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3303.093538] ? find_held_lock+0x2c/0x110 [ 3303.093558] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3303.093571] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3303.093584] ? do_vfs_ioctl+0x283/0x10d0 [ 3303.093596] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3303.093620] ? generic_block_fiemap+0x60/0x60 [ 3303.103249] ? lock_downgrade+0x6d0/0x6d0 [ 3303.103868] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3303.104563] ? wait_for_completion_io+0x270/0x270 [ 3303.105275] ? selinux_file_ioctl+0xb6/0x270 [ 3303.105917] ? __ext4_ioctl+0x4220/0x4220 [ 3303.106525] __x64_sys_ioctl+0x19a/0x210 [ 3303.107117] do_syscall_64+0x33/0x40 [ 3303.107657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3303.108262] RIP: 0033:0x7fcaa5e39b19 [ 3303.108688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3303.110773] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3303.111637] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3303.112458] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3303.113267] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3303.114064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3303.114868] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3303.115692] CPU: 1 PID: 16557 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3303.117237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3303.119020] Call Trace: [ 3303.119602] dump_stack+0x107/0x167 [ 3303.120410] should_fail.cold+0x5/0xa [ 3303.121253] ? create_object.isra.0+0x3a/0xa30 [ 3303.122223] should_failslab+0x5/0x20 [ 3303.123035] kmem_cache_alloc+0x5b/0x310 [ 3303.123930] ? lock_downgrade+0x6d0/0x6d0 [ 3303.124823] create_object.isra.0+0x3a/0xa30 [ 3303.125763] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3303.126853] kmem_cache_alloc_trace+0x151/0x320 [ 3303.127863] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3303.128878] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.129982] ? ext4_getfsmap_dev_compare+0x1/0x80 [ 3303.131002] ? do_swap+0x134/0x210 [ 3303.131785] ? sort_r+0x239/0x360 [ 3303.132542] ? ext4_file_open+0xa50/0xa50 [ 3303.133440] ext4_getfsmap+0x695/0x990 [ 3303.134272] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.135355] ? ext4_fsmap_to_internal+0x260/0x260 [ 3303.136401] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3303.137532] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.138638] ext4_ioc_getfsmap+0x2b0/0x620 [ 3303.139553] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3303.140543] ? find_held_lock+0x2c/0x110 [ 3303.141427] ? avc_has_extended_perms+0x675/0xf40 [ 3303.142511] ? lock_downgrade+0x6d0/0x6d0 [ 3303.143406] __ext4_ioctl+0x8ad/0x4220 [ 3303.144262] ? ext4_reset_inode_seed+0x450/0x450 [ 3303.145299] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3303.146414] ? find_held_lock+0x2c/0x110 [ 3303.147295] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3303.148642] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3303.149782] ? do_vfs_ioctl+0x283/0x10d0 [ 3303.150657] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3303.151805] ? generic_block_fiemap+0x60/0x60 [ 3303.153198] ? lock_downgrade+0x6d0/0x6d0 [ 3303.154082] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3303.155118] ? wait_for_completion_io+0x270/0x270 [ 3303.156178] ? selinux_file_ioctl+0xb6/0x270 [ 3303.157113] ? __ext4_ioctl+0x4220/0x4220 [ 3303.158012] __x64_sys_ioctl+0x19a/0x210 [ 3303.158894] do_syscall_64+0x33/0x40 [ 3303.159701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3303.160812] RIP: 0033:0x7f81caa8db19 [ 3303.161619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3303.165572] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3303.167198] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3303.168720] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3303.170252] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3303.171774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3303.173331] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:42:28 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) 19:42:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 80) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3303.195094] FAULT_INJECTION: forcing a failure. [ 3303.195094] name failslab, interval 1, probability 0, space 0, times 0 [ 3303.196422] CPU: 0 PID: 16544 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3303.197194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3303.198105] Call Trace: [ 3303.198401] dump_stack+0x107/0x167 [ 3303.198799] should_fail.cold+0x5/0xa [ 3303.199219] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3303.199764] should_failslab+0x5/0x20 [ 3303.200181] kmem_cache_alloc_trace+0x55/0x320 [ 3303.200684] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3303.201238] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3303.201763] ? lock_chain_count+0x20/0x20 [ 3303.202213] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.202775] ? do_swap+0x134/0x210 [ 3303.203165] ? sort_r+0x239/0x360 [ 3303.203540] ? ext4_file_open+0xa50/0xa50 [ 3303.203998] ext4_getfsmap+0x695/0x990 [ 3303.204432] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.204982] ? ext4_fsmap_to_internal+0x260/0x260 [ 3303.205503] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3303.206072] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.206633] ext4_ioc_getfsmap+0x2b0/0x620 [ 3303.207093] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3303.207582] ? find_held_lock+0x2c/0x110 [ 3303.208028] ? avc_has_extended_perms+0x675/0xf40 [ 3303.208566] ? lock_downgrade+0x6d0/0x6d0 [ 3303.209013] __ext4_ioctl+0x8ad/0x4220 [ 3303.209439] ? ext4_reset_inode_seed+0x450/0x450 [ 3303.209949] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3303.210514] ? find_held_lock+0x2c/0x110 [ 3303.210961] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3303.211586] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3303.212147] ? do_vfs_ioctl+0x283/0x10d0 [ 3303.212585] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3303.213147] ? generic_block_fiemap+0x60/0x60 [ 3303.213629] ? lock_downgrade+0x6d0/0x6d0 [ 3303.214075] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3303.214593] ? wait_for_completion_io+0x270/0x270 [ 3303.215116] ? selinux_file_ioctl+0xb6/0x270 [ 3303.215593] ? __ext4_ioctl+0x4220/0x4220 [ 3303.216049] __x64_sys_ioctl+0x19a/0x210 [ 3303.216490] do_syscall_64+0x33/0x40 [ 3303.216895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3303.217446] RIP: 0033:0x7fb4d3c71b19 [ 3303.217849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3303.219824] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3303.220640] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3303.221399] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3303.222159] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3303.222921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3303.223682] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:42:28 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) [ 3303.277800] FAULT_INJECTION: forcing a failure. [ 3303.277800] name failslab, interval 1, probability 0, space 0, times 0 19:42:28 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000400)={0x8, 0x1, 0x7fffffff, 0x6a}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r3, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3303.279121] CPU: 0 PID: 16572 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3303.279995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3303.280892] Call Trace: [ 3303.281183] dump_stack+0x107/0x167 [ 3303.281575] should_fail.cold+0x5/0xa [ 3303.281987] ? create_object.isra.0+0x3a/0xa30 [ 3303.282474] should_failslab+0x5/0x20 [ 3303.282885] kmem_cache_alloc+0x5b/0x310 [ 3303.283328] create_object.isra.0+0x3a/0xa30 [ 3303.283803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3303.284351] kmem_cache_alloc_trace+0x151/0x320 [ 3303.284854] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3303.285364] ? lock_chain_count+0x20/0x20 [ 3303.285809] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.286358] ? do_swap+0x134/0x210 [ 3303.286739] ? sort_r+0x239/0x360 [ 3303.287113] ? ext4_file_open+0xa50/0xa50 [ 3303.287559] ext4_getfsmap+0x695/0x990 [ 3303.287983] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.288530] ? ext4_fsmap_to_internal+0x260/0x260 [ 3303.289045] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3303.289614] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3303.290166] ext4_ioc_getfsmap+0x2b0/0x620 [ 3303.290620] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3303.291107] ? find_held_lock+0x2c/0x110 [ 3303.291545] ? avc_has_extended_perms+0x675/0xf40 [ 3303.292089] ? lock_downgrade+0x6d0/0x6d0 [ 3303.292541] __ext4_ioctl+0x8ad/0x4220 [ 3303.292963] ? ext4_reset_inode_seed+0x450/0x450 [ 3303.293473] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3303.294032] ? find_held_lock+0x2c/0x110 [ 3303.294474] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3303.295089] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3303.295647] ? do_vfs_ioctl+0x283/0x10d0 [ 3303.296088] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3303.296649] ? generic_block_fiemap+0x60/0x60 [ 3303.297126] ? lock_downgrade+0x6d0/0x6d0 [ 3303.297571] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3303.298087] ? wait_for_completion_io+0x270/0x270 [ 3303.298607] ? selinux_file_ioctl+0xb6/0x270 [ 3303.299082] ? __ext4_ioctl+0x4220/0x4220 [ 3303.299526] __x64_sys_ioctl+0x19a/0x210 [ 3303.299982] do_syscall_64+0x33/0x40 [ 3303.300381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3303.300930] RIP: 0033:0x7fcaa5e39b19 [ 3303.301329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3303.303289] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3303.304115] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3303.304877] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3303.305641] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3303.306404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3303.307164] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:42:28 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2400, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x5460, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:28 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xf}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:42:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x6609, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 83) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:40 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="367687609704780ab5f8c135e700411b61cb12390e080cb419d24fe7a0f6326ee1f0cc7455e79943f4b46d71cb259a10", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:40 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x10}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:42:40 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4000, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 81) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:40 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x660c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:40 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) 19:42:40 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 74) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3314.867983] FAULT_INJECTION: forcing a failure. [ 3314.867983] name failslab, interval 1, probability 0, space 0, times 0 [ 3314.870617] CPU: 1 PID: 16607 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3314.872080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3314.873816] Call Trace: [ 3314.874381] dump_stack+0x107/0x167 [ 3314.875134] should_fail.cold+0x5/0xa [ 3314.875929] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3314.876941] should_failslab+0x5/0x20 [ 3314.877007] FAULT_INJECTION: forcing a failure. [ 3314.877007] name failslab, interval 1, probability 0, space 0, times 0 [ 3314.877712] kmem_cache_alloc_trace+0x55/0x320 [ 3314.877730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3314.877752] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3314.877786] ? lock_chain_count+0x20/0x20 [ 3314.877805] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3314.877833] ? do_swap+0x134/0x210 [ 3314.877853] ? sort_r+0x239/0x360 [ 3314.877871] ? ext4_file_open+0xa50/0xa50 [ 3314.877894] ext4_getfsmap+0x695/0x990 [ 3314.888131] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3314.889174] ? ext4_fsmap_to_internal+0x260/0x260 [ 3314.890161] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3314.891244] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3314.892308] ext4_ioc_getfsmap+0x2b0/0x620 [ 3314.893164] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3314.894099] ? find_held_lock+0x2c/0x110 [ 3314.894926] ? avc_has_extended_perms+0x675/0xf40 [ 3314.895955] ? lock_downgrade+0x6d0/0x6d0 [ 3314.896806] __ext4_ioctl+0x8ad/0x4220 [ 3314.897625] ? ext4_reset_inode_seed+0x450/0x450 [ 3314.898585] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3314.899659] ? find_held_lock+0x2c/0x110 [ 3314.900534] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3314.901740] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3314.902816] ? do_vfs_ioctl+0x283/0x10d0 [ 3314.903682] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3314.904791] ? generic_block_fiemap+0x60/0x60 [ 3314.905728] ? lock_downgrade+0x6d0/0x6d0 [ 3314.906593] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3314.907600] ? wait_for_completion_io+0x270/0x270 [ 3314.908614] ? selinux_file_ioctl+0xb6/0x270 [ 3314.909529] ? __ext4_ioctl+0x4220/0x4220 [ 3314.910392] __x64_sys_ioctl+0x19a/0x210 [ 3314.911233] do_syscall_64+0x33/0x40 [ 3314.912012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3314.913075] RIP: 0033:0x7f81caa8db19 [ 3314.913850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3314.917691] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3314.919274] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3314.920754] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3314.922230] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3314.923710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3314.925185] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3314.926677] CPU: 0 PID: 16614 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3314.928184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3314.929877] Call Trace: [ 3314.929947] FAULT_INJECTION: forcing a failure. [ 3314.929947] name failslab, interval 1, probability 0, space 0, times 0 [ 3314.930415] dump_stack+0x107/0x167 [ 3314.930437] should_fail.cold+0x5/0xa [ 3314.930467] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3314.935179] should_failslab+0x5/0x20 [ 3314.935969] kmem_cache_alloc_trace+0x55/0x320 [ 3314.936933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3314.937959] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3314.938940] ? lock_chain_count+0x20/0x20 [ 3314.939787] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3314.940860] ? do_swap+0x134/0x210 [ 3314.941580] ? sort_r+0x239/0x360 [ 3314.942302] ? ext4_file_open+0xa50/0xa50 [ 3314.943149] ext4_getfsmap+0x695/0x990 [ 3314.943966] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3314.945001] ? ext4_fsmap_to_internal+0x260/0x260 [ 3314.945996] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3314.947063] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3314.948148] ext4_ioc_getfsmap+0x2b0/0x620 [ 3314.949001] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3314.949948] ? find_held_lock+0x2c/0x110 [ 3314.950777] ? avc_has_extended_perms+0x675/0xf40 [ 3314.951811] ? lock_downgrade+0x6d0/0x6d0 [ 3314.952661] __ext4_ioctl+0x8ad/0x4220 [ 3314.953478] ? ext4_reset_inode_seed+0x450/0x450 [ 3314.954437] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3314.955523] ? find_held_lock+0x2c/0x110 [ 3314.956371] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3314.957559] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3314.958597] ? do_vfs_ioctl+0x283/0x10d0 [ 3314.959425] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3314.960497] ? generic_block_fiemap+0x60/0x60 [ 3314.961404] ? lock_downgrade+0x6d0/0x6d0 [ 3314.962244] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3314.963229] ? wait_for_completion_io+0x270/0x270 [ 3314.964231] ? selinux_file_ioctl+0xb6/0x270 [ 3314.965117] ? __ext4_ioctl+0x4220/0x4220 [ 3314.965960] __x64_sys_ioctl+0x19a/0x210 [ 3314.966803] do_syscall_64+0x33/0x40 [ 3314.967563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3314.968636] RIP: 0033:0x7fb4d3c71b19 [ 3314.969399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3314.973247] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3314.974837] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3314.976369] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3314.977869] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3314.979343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3314.980847] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3314.982354] CPU: 1 PID: 16615 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3314.983809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3314.985546] Call Trace: [ 3314.986092] dump_stack+0x107/0x167 [ 3314.986856] should_fail.cold+0x5/0xa [ 3314.987647] ? create_object.isra.0+0x3a/0xa30 [ 3314.988606] should_failslab+0x5/0x20 [ 3314.989397] kmem_cache_alloc+0x5b/0x310 [ 3314.990244] create_object.isra.0+0x3a/0xa30 [ 3314.991303] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3314.992438] kmem_cache_alloc_trace+0x151/0x320 [ 3314.993442] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3314.994418] ? lock_chain_count+0x20/0x20 [ 3314.995307] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3314.996377] ? do_swap+0x134/0x210 [ 3314.997104] ? sort_r+0x239/0x360 [ 3314.997822] ? ext4_file_open+0xa50/0xa50 [ 3314.998695] ext4_getfsmap+0x695/0x990 [ 3314.999504] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3315.000561] ? ext4_fsmap_to_internal+0x260/0x260 [ 3315.001563] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3315.002709] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3315.003782] ext4_ioc_getfsmap+0x2b0/0x620 [ 3315.004703] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3315.005709] ? find_held_lock+0x2c/0x110 [ 3315.006608] ? avc_has_extended_perms+0x675/0xf40 [ 3315.007712] ? lock_downgrade+0x6d0/0x6d0 [ 3315.008617] __ext4_ioctl+0x8ad/0x4220 [ 3315.009417] ? ext4_reset_inode_seed+0x450/0x450 [ 3315.010398] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3315.011478] ? find_held_lock+0x2c/0x110 [ 3315.012356] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3315.013528] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3315.014605] ? do_vfs_ioctl+0x283/0x10d0 [ 3315.015438] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3315.016542] ? generic_block_fiemap+0x60/0x60 [ 3315.017489] ? lock_downgrade+0x6d0/0x6d0 [ 3315.018351] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3315.019393] ? wait_for_completion_io+0x270/0x270 [ 3315.020411] ? selinux_file_ioctl+0xb6/0x270 [ 3315.021460] ? __ext4_ioctl+0x4220/0x4220 [ 3315.022325] __x64_sys_ioctl+0x19a/0x210 [ 3315.023182] do_syscall_64+0x33/0x40 [ 3315.023968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3315.025113] RIP: 0033:0x7fcaa5e39b19 [ 3315.025886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3315.029948] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3315.031533] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3315.033019] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3315.034502] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3315.035989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3315.037468] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:42:40 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 75) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:40 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) 19:42:40 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x11}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:42:40 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x6611, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:40 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4800, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3315.205711] FAULT_INJECTION: forcing a failure. [ 3315.205711] name failslab, interval 1, probability 0, space 0, times 0 [ 3315.208310] CPU: 1 PID: 16629 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3315.209740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3315.211463] Call Trace: [ 3315.212034] dump_stack+0x107/0x167 [ 3315.212793] should_fail.cold+0x5/0xa [ 3315.213584] ? create_object.isra.0+0x3a/0xa30 [ 3315.214531] should_failslab+0x5/0x20 [ 3315.215321] kmem_cache_alloc+0x5b/0x310 [ 3315.216186] create_object.isra.0+0x3a/0xa30 [ 3315.217098] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3315.218157] kmem_cache_alloc_trace+0x151/0x320 [ 3315.219129] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3315.220123] ? lock_chain_count+0x20/0x20 [ 3315.220985] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3315.222074] ? do_swap+0x134/0x210 [ 3315.222815] ? sort_r+0x239/0x360 [ 3315.223536] ? ext4_file_open+0xa50/0xa50 [ 3315.224415] ext4_getfsmap+0x695/0x990 [ 3315.225227] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3315.226291] ? ext4_fsmap_to_internal+0x260/0x260 [ 3315.227294] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3315.228405] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3315.229485] ext4_ioc_getfsmap+0x2b0/0x620 [ 3315.230368] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3315.231323] ? find_held_lock+0x2c/0x110 [ 3315.232185] ? avc_has_extended_perms+0x675/0xf40 [ 3315.233229] ? lock_downgrade+0x6d0/0x6d0 [ 3315.234112] __ext4_ioctl+0x8ad/0x4220 [ 3315.234970] ? ext4_reset_inode_seed+0x450/0x450 [ 3315.235986] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3315.237080] ? find_held_lock+0x2c/0x110 [ 3315.237952] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3315.239149] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3315.240236] ? do_vfs_ioctl+0x283/0x10d0 [ 3315.241089] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3315.242183] ? generic_block_fiemap+0x60/0x60 [ 3315.243137] ? lock_downgrade+0x6d0/0x6d0 [ 3315.244018] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3315.245135] ? wait_for_completion_io+0x270/0x270 [ 3315.246192] ? selinux_file_ioctl+0xb6/0x270 [ 3315.247138] ? __ext4_ioctl+0x4220/0x4220 [ 3315.248026] __x64_sys_ioctl+0x19a/0x210 [ 3315.248879] do_syscall_64+0x33/0x40 [ 3315.249663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3315.250738] RIP: 0033:0x7fb4d3c71b19 [ 3315.251517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3315.255404] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3315.257007] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3315.258499] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3315.260004] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3315.261501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3315.262998] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:42:40 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) [ 3315.340204] FAULT_INJECTION: forcing a failure. [ 3315.340204] name failslab, interval 1, probability 0, space 0, times 0 [ 3315.343434] CPU: 0 PID: 16640 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3315.345009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3315.346881] Call Trace: [ 3315.347481] dump_stack+0x107/0x167 [ 3315.348317] should_fail.cold+0x5/0xa [ 3315.349191] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3315.350286] should_failslab+0x5/0x20 [ 3315.351149] kmem_cache_alloc_trace+0x55/0x320 [ 3315.352196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3315.353350] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3315.354424] ? lock_chain_count+0x20/0x20 [ 3315.355371] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3315.356550] ? do_swap+0x134/0x210 [ 3315.357364] ? sort_r+0x239/0x360 [ 3315.358149] ? ext4_file_open+0xa50/0xa50 [ 3315.359089] ext4_getfsmap+0x695/0x990 [ 3315.359993] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3315.361144] ? ext4_fsmap_to_internal+0x260/0x260 [ 3315.362237] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3315.363437] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3315.364618] ext4_ioc_getfsmap+0x2b0/0x620 [ 3315.365573] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3315.366679] ? find_held_lock+0x2c/0x110 [ 3315.367620] ? avc_has_extended_perms+0x675/0xf40 [ 3315.368761] ? lock_downgrade+0x6d0/0x6d0 [ 3315.369716] __ext4_ioctl+0x8ad/0x4220 [ 3315.370611] ? ext4_reset_inode_seed+0x450/0x450 [ 3315.371686] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3315.372874] ? find_held_lock+0x2c/0x110 [ 3315.373804] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3315.375101] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3315.376284] ? do_vfs_ioctl+0x283/0x10d0 [ 3315.377206] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3315.378392] ? generic_block_fiemap+0x60/0x60 [ 3315.379403] ? lock_downgrade+0x6d0/0x6d0 [ 3315.380342] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3315.381435] ? wait_for_completion_io+0x270/0x270 [ 3315.382527] ? selinux_file_ioctl+0xb6/0x270 [ 3315.383534] ? __ext4_ioctl+0x4220/0x4220 [ 3315.384497] __x64_sys_ioctl+0x19a/0x210 [ 3315.385419] do_syscall_64+0x33/0x40 [ 3315.386264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3315.387426] RIP: 0033:0x7f81caa8db19 [ 3315.388276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3315.392425] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3315.394146] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3315.395763] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3315.397378] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3315.399002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3315.400665] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:42:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 82) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:53 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 85) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:53 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x6612, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:53 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x12}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:42:53 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 76) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:53 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c00, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:53 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:42:53 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b40bcfc1ba5391f95a89803e7fd60b4db4040b5386b7000000000000008230e856ca8398e06711716dee1ec11b57f22ab9d101a0c20fe3da0e870080000000000000f35581ec58c0d38b5d6f74e12dcb590b23f78045324adf5fbf7bf0a87c668e443fd3e66b3380c10bf12bfc3952f377c9f6d30b404c57aa41a1cd85b941194c046068884d6a9d51ab50bb0de97be81ebda000c716c73e8a007b66c10027fad294aad831a2727fc67582c5738d00745f9db33256fec4b40511faad20da1b425d3b84722d026c82b70cab6b65f929f22be15cd9db28bd81cbcdadca7bfaa83b9e529361", @ANYRES16, @ANYRESHEX=r2], 0xb4}}, 0x44094) openat(r3, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051d80)={0x0, [{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "8286ba2266c7c9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000570c0)={0x0, [{}, {0x0}], 0x3f, "f4244e96fc5f4b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000510c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0xf, "8a7e3c59a411b6"}) [ 3328.591042] FAULT_INJECTION: forcing a failure. [ 3328.591042] name failslab, interval 1, probability 0, space 0, times 0 [ 3328.592436] CPU: 1 PID: 16667 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3328.593219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3328.594154] Call Trace: [ 3328.594461] dump_stack+0x107/0x167 [ 3328.594873] should_fail.cold+0x5/0xa [ 3328.595307] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3328.595850] should_failslab+0x5/0x20 [ 3328.596297] kmem_cache_alloc_trace+0x55/0x320 [ 3328.596819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3328.597394] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3328.597940] ? lock_chain_count+0x20/0x20 [ 3328.598412] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.599033] ? do_swap+0x134/0x210 [ 3328.599440] ? sort_r+0x239/0x360 [ 3328.599836] ? ext4_file_open+0xa50/0xa50 [ 3328.600327] ext4_getfsmap+0x695/0x990 [ 3328.600764] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.601338] ? ext4_fsmap_to_internal+0x260/0x260 [ 3328.601881] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3328.602476] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.603062] ext4_ioc_getfsmap+0x2b0/0x620 [ 3328.603542] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3328.604077] ? find_held_lock+0x2c/0x110 [ 3328.604546] ? avc_has_extended_perms+0x675/0xf40 [ 3328.605110] ? lock_downgrade+0x6d0/0x6d0 [ 3328.605582] __ext4_ioctl+0x8ad/0x4220 [ 3328.606040] ? ext4_reset_inode_seed+0x450/0x450 [ 3328.606582] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.607173] ? find_held_lock+0x2c/0x110 [ 3328.607650] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3328.608317] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3328.608909] ? do_vfs_ioctl+0x283/0x10d0 [ 3328.609385] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3328.609995] ? generic_block_fiemap+0x60/0x60 [ 3328.610507] ? lock_downgrade+0x6d0/0x6d0 [ 3328.611007] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3328.611554] ? wait_for_completion_io+0x270/0x270 [ 3328.612121] ? selinux_file_ioctl+0xb6/0x270 [ 3328.612622] ? __ext4_ioctl+0x4220/0x4220 [ 3328.613097] __x64_sys_ioctl+0x19a/0x210 [ 3328.613558] do_syscall_64+0x33/0x40 [ 3328.613980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3328.614557] RIP: 0033:0x7fcaa5e39b19 [ 3328.614977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3328.617108] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3328.617985] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3328.618829] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3328.619671] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3328.620505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3328.621316] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3328.637040] FAULT_INJECTION: forcing a failure. [ 3328.637040] name failslab, interval 1, probability 0, space 0, times 0 [ 3328.639592] CPU: 0 PID: 16657 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3328.641076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3328.642835] Call Trace: [ 3328.643398] dump_stack+0x107/0x167 [ 3328.644179] should_fail.cold+0x5/0xa [ 3328.644995] ? create_object.isra.0+0x3a/0xa30 [ 3328.645966] should_failslab+0x5/0x20 [ 3328.646770] kmem_cache_alloc+0x5b/0x310 [ 3328.647636] create_object.isra.0+0x3a/0xa30 [ 3328.648588] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3328.649674] kmem_cache_alloc_trace+0x151/0x320 [ 3328.650671] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3328.651689] ? lock_chain_count+0x20/0x20 [ 3328.652583] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.653658] ? do_swap+0x134/0x210 [ 3328.654410] ? sort_r+0x239/0x360 [ 3328.655134] ? ext4_file_open+0xa50/0xa50 [ 3328.656023] ext4_getfsmap+0x695/0x990 [ 3328.656843] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.657908] ? ext4_fsmap_to_internal+0x260/0x260 [ 3328.658920] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3328.660035] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.661131] ext4_ioc_getfsmap+0x2b0/0x620 [ 3328.662015] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3328.662967] ? find_held_lock+0x2c/0x110 [ 3328.663838] ? avc_has_extended_perms+0x675/0xf40 [ 3328.664906] ? lock_downgrade+0x6d0/0x6d0 [ 3328.665786] __ext4_ioctl+0x8ad/0x4220 [ 3328.666612] ? ext4_reset_inode_seed+0x450/0x450 [ 3328.667614] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.668730] ? find_held_lock+0x2c/0x110 [ 3328.669603] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3328.670810] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3328.671896] ? do_vfs_ioctl+0x283/0x10d0 [ 3328.672761] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3328.673866] ? generic_block_fiemap+0x60/0x60 [ 3328.674811] ? lock_downgrade+0x6d0/0x6d0 [ 3328.675685] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3328.676717] ? wait_for_completion_io+0x270/0x270 [ 3328.677741] ? selinux_file_ioctl+0xb6/0x270 [ 3328.678675] ? __ext4_ioctl+0x4220/0x4220 [ 3328.679555] __x64_sys_ioctl+0x19a/0x210 [ 3328.680423] do_syscall_64+0x33/0x40 [ 3328.681207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3328.682288] RIP: 0033:0x7f81caa8db19 [ 3328.683073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3328.686972] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3328.688580] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3328.690089] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3328.691593] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3328.693105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3328.694606] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:42:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 83) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3328.721906] FAULT_INJECTION: forcing a failure. [ 3328.721906] name failslab, interval 1, probability 0, space 0, times 0 [ 3328.724462] CPU: 0 PID: 16670 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3328.725923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3328.727659] Call Trace: [ 3328.728229] dump_stack+0x107/0x167 [ 3328.728996] should_fail.cold+0x5/0xa [ 3328.729802] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3328.730819] should_failslab+0x5/0x20 [ 3328.731616] kmem_cache_alloc_trace+0x55/0x320 [ 3328.732590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3328.733666] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3328.734664] ? lock_chain_count+0x20/0x20 [ 3328.735531] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.736620] ? do_swap+0x134/0x210 [ 3328.737372] ? sort_r+0x239/0x360 [ 3328.738097] ? ext4_file_open+0xa50/0xa50 [ 3328.738971] ext4_getfsmap+0x695/0x990 [ 3328.739790] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.740866] ? ext4_fsmap_to_internal+0x260/0x260 [ 3328.741885] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3328.743005] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.744100] ext4_ioc_getfsmap+0x2b0/0x620 [ 3328.744993] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3328.745944] ? find_held_lock+0x2c/0x110 [ 3328.746799] ? avc_has_extended_perms+0x675/0xf40 [ 3328.747842] ? lock_downgrade+0x6d0/0x6d0 [ 3328.748730] __ext4_ioctl+0x8ad/0x4220 [ 3328.749559] ? ext4_reset_inode_seed+0x450/0x450 [ 3328.750556] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.751659] ? find_held_lock+0x2c/0x110 [ 3328.752539] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3328.753752] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3328.754832] ? do_vfs_ioctl+0x283/0x10d0 [ 3328.755689] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3328.756798] ? generic_block_fiemap+0x60/0x60 [ 3328.757733] ? lock_downgrade+0x6d0/0x6d0 [ 3328.758606] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3328.759615] ? wait_for_completion_io+0x270/0x270 [ 3328.760965] ? selinux_file_ioctl+0xb6/0x270 [ 3328.762090] ? __ext4_ioctl+0x4220/0x4220 [ 3328.763140] __x64_sys_ioctl+0x19a/0x210 [ 3328.764185] do_syscall_64+0x33/0x40 [ 3328.765026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3328.766175] RIP: 0033:0x7fb4d3c71b19 [ 3328.767010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3328.771147] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3328.772857] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3328.774454] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3328.776056] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3328.777654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3328.779251] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:42:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 86) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3328.809132] FAULT_INJECTION: forcing a failure. [ 3328.809132] name failslab, interval 1, probability 0, space 0, times 0 [ 3328.810495] CPU: 1 PID: 16684 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3328.811278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3328.812213] Call Trace: [ 3328.812518] dump_stack+0x107/0x167 [ 3328.812930] should_fail.cold+0x5/0xa [ 3328.813371] ? create_object.isra.0+0x3a/0xa30 [ 3328.813883] should_failslab+0x5/0x20 [ 3328.814311] kmem_cache_alloc+0x5b/0x310 [ 3328.814769] create_object.isra.0+0x3a/0xa30 [ 3328.815260] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3328.815831] kmem_cache_alloc_trace+0x151/0x320 [ 3328.816364] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3328.816894] ? lock_chain_count+0x20/0x20 [ 3328.817359] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.817935] ? do_swap+0x134/0x210 [ 3328.818336] ? sort_r+0x239/0x360 [ 3328.818724] ? ext4_file_open+0xa50/0xa50 [ 3328.819194] ext4_getfsmap+0x695/0x990 [ 3328.819632] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.820210] ? ext4_fsmap_to_internal+0x260/0x260 [ 3328.820752] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3328.821343] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.821965] ext4_ioc_getfsmap+0x2b0/0x620 [ 3328.822436] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3328.822949] ? find_held_lock+0x2c/0x110 [ 3328.823409] ? avc_has_extended_perms+0x675/0xf40 [ 3328.823978] ? lock_downgrade+0x6d0/0x6d0 [ 3328.824446] __ext4_ioctl+0x8ad/0x4220 [ 3328.824888] ? ext4_reset_inode_seed+0x450/0x450 [ 3328.825416] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.826004] ? find_held_lock+0x2c/0x110 [ 3328.826470] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3328.827117] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3328.827699] ? do_vfs_ioctl+0x283/0x10d0 [ 3328.828168] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3328.828755] ? generic_block_fiemap+0x60/0x60 [ 3328.829257] ? lock_downgrade+0x6d0/0x6d0 [ 3328.829725] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3328.830266] ? wait_for_completion_io+0x270/0x270 [ 3328.830815] ? selinux_file_ioctl+0xb6/0x270 [ 3328.831309] ? __ext4_ioctl+0x4220/0x4220 [ 3328.831776] __x64_sys_ioctl+0x19a/0x210 [ 3328.832245] do_syscall_64+0x33/0x40 [ 3328.832666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3328.833244] RIP: 0033:0x7fcaa5e39b19 [ 3328.833665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3328.835754] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3328.836627] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3328.837436] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3328.838248] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3328.839058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3328.839874] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:42:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x6628, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3328.876420] FAULT_INJECTION: forcing a failure. [ 3328.876420] name failslab, interval 1, probability 0, space 0, times 0 [ 3328.877830] CPU: 1 PID: 16689 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3328.878633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3328.879568] Call Trace: [ 3328.879872] dump_stack+0x107/0x167 [ 3328.880292] should_fail.cold+0x5/0xa [ 3328.880723] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3328.881263] should_failslab+0x5/0x20 [ 3328.881707] kmem_cache_alloc_trace+0x55/0x320 [ 3328.882230] ? ext4_get_group_desc+0x2a0/0x560 [ 3328.882747] ext4_getfsmap_datadev+0x719/0x25c0 [ 3328.883294] ? lock_chain_count+0x20/0x20 [ 3328.883761] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.884344] ? do_swap+0x134/0x210 [ 3328.884748] ? sort_r+0x239/0x360 [ 3328.885142] ? ext4_file_open+0xa50/0xa50 [ 3328.885620] ext4_getfsmap+0x695/0x990 [ 3328.886060] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.886644] ? ext4_fsmap_to_internal+0x260/0x260 [ 3328.887184] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3328.887784] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3328.888374] ext4_ioc_getfsmap+0x2b0/0x620 [ 3328.888849] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3328.889360] ? find_held_lock+0x2c/0x110 [ 3328.889833] ? avc_has_extended_perms+0x675/0xf40 [ 3328.890398] ? lock_downgrade+0x6d0/0x6d0 [ 3328.890872] __ext4_ioctl+0x8ad/0x4220 [ 3328.891316] ? ext4_reset_inode_seed+0x450/0x450 [ 3328.891851] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3328.892449] ? find_held_lock+0x2c/0x110 [ 3328.892912] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3328.893570] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3328.894148] ? do_vfs_ioctl+0x283/0x10d0 [ 3328.894604] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3328.895190] ? generic_block_fiemap+0x60/0x60 [ 3328.895705] ? lock_downgrade+0x6d0/0x6d0 [ 3328.896178] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3328.896731] ? wait_for_completion_io+0x270/0x270 [ 3328.897281] ? selinux_file_ioctl+0xb6/0x270 [ 3328.897777] ? __ext4_ioctl+0x4220/0x4220 [ 3328.898254] __x64_sys_ioctl+0x19a/0x210 [ 3328.898710] do_syscall_64+0x33/0x40 [ 3328.899131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3328.899719] RIP: 0033:0x7f81caa8db19 [ 3328.900144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3328.902238] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3328.903096] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3328.903897] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3328.904705] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3328.905508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3328.906308] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:42:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40046629, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:42:54 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4008000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:54 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 19:42:54 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6800, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:42:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 87) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3329.029437] FAULT_INJECTION: forcing a failure. [ 3329.029437] name failslab, interval 1, probability 0, space 0, times 0 [ 3329.030904] CPU: 1 PID: 16705 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3329.031690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3329.032631] Call Trace: [ 3329.032946] dump_stack+0x107/0x167 [ 3329.033359] should_fail.cold+0x5/0xa [ 3329.033800] ? create_object.isra.0+0x3a/0xa30 [ 3329.034309] should_failslab+0x5/0x20 [ 3329.034758] kmem_cache_alloc+0x5b/0x310 [ 3329.035214] ? lock_downgrade+0x6d0/0x6d0 [ 3329.035692] create_object.isra.0+0x3a/0xa30 [ 3329.036200] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3329.036782] kmem_cache_alloc_trace+0x151/0x320 [ 3329.037310] ext4_getfsmap_datadev+0x719/0x25c0 [ 3329.037839] ? lock_chain_count+0x20/0x20 [ 3329.038302] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3329.038879] ? do_swap+0x134/0x210 [ 3329.039281] ? sort_r+0x239/0x360 [ 3329.039671] ? ext4_file_open+0xa50/0xa50 [ 3329.040156] ext4_getfsmap+0x695/0x990 [ 3329.040595] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3329.041167] ? ext4_fsmap_to_internal+0x260/0x260 [ 3329.041727] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3329.042338] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3329.042924] ext4_ioc_getfsmap+0x2b0/0x620 [ 3329.043400] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3329.043924] ? find_held_lock+0x2c/0x110 [ 3329.044397] ? avc_has_extended_perms+0x675/0xf40 [ 3329.044976] ? lock_downgrade+0x6d0/0x6d0 [ 3329.045451] __ext4_ioctl+0x8ad/0x4220 [ 3329.045896] ? ext4_reset_inode_seed+0x450/0x450 [ 3329.046431] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3329.047077] ? find_held_lock+0x2c/0x110 [ 3329.047542] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3329.048194] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3329.048776] ? do_vfs_ioctl+0x283/0x10d0 [ 3329.049238] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3329.049829] ? generic_block_fiemap+0x60/0x60 [ 3329.050336] ? lock_downgrade+0x6d0/0x6d0 [ 3329.050810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3329.051352] ? wait_for_completion_io+0x270/0x270 [ 3329.051905] ? selinux_file_ioctl+0xb6/0x270 [ 3329.052416] ? __ext4_ioctl+0x4220/0x4220 [ 3329.052889] __x64_sys_ioctl+0x19a/0x210 [ 3329.053350] do_syscall_64+0x33/0x40 [ 3329.053777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3329.054358] RIP: 0033:0x7f81caa8db19 [ 3329.054787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3329.056860] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3329.057717] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3329.058519] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3329.059325] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3329.060132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3329.060934] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:43:04 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c00, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:43:04 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000004e00080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009800700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x608c0, 0x101) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:43:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40049409, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:04 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 77) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:04 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 19:43:04 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x13}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:43:04 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3339.567835] FAULT_INJECTION: forcing a failure. [ 3339.567835] name failslab, interval 1, probability 0, space 0, times 0 [ 3339.570332] CPU: 0 PID: 16726 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3339.571724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3339.573382] Call Trace: [ 3339.573913] dump_stack+0x107/0x167 [ 3339.574639] should_fail.cold+0x5/0xa [ 3339.575408] ? create_object.isra.0+0x3a/0xa30 [ 3339.576321] should_failslab+0x5/0x20 [ 3339.577087] kmem_cache_alloc+0x5b/0x310 [ 3339.577898] create_object.isra.0+0x3a/0xa30 [ 3339.578766] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3339.579779] kmem_cache_alloc_trace+0x151/0x320 [ 3339.580716] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3339.581650] ? lock_chain_count+0x20/0x20 [ 3339.582472] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.583484] ? do_swap+0x134/0x210 [ 3339.584204] ? sort_r+0x239/0x360 [ 3339.584894] ? ext4_file_open+0xa50/0xa50 [ 3339.585721] ext4_getfsmap+0x695/0x990 [ 3339.586496] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.587512] ? ext4_fsmap_to_internal+0x260/0x260 [ 3339.588484] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3339.589533] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.590555] ext4_ioc_getfsmap+0x2b0/0x620 [ 3339.591388] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3339.592297] ? find_held_lock+0x2c/0x110 [ 3339.593106] ? avc_has_extended_perms+0x675/0xf40 [ 3339.594100] ? lock_downgrade+0x6d0/0x6d0 [ 3339.594934] __ext4_ioctl+0x8ad/0x4220 [ 3339.595724] ? ext4_reset_inode_seed+0x450/0x450 [ 3339.596675] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3339.597724] ? find_held_lock+0x2c/0x110 [ 3339.598545] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3339.599681] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3339.600750] ? do_vfs_ioctl+0x283/0x10d0 [ 3339.601564] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3339.602603] ? generic_block_fiemap+0x60/0x60 [ 3339.603492] ? lock_downgrade+0x6d0/0x6d0 [ 3339.604320] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3339.605272] ? wait_for_completion_io+0x270/0x270 [ 3339.606237] ? selinux_file_ioctl+0xb6/0x270 [ 3339.607120] ? __ext4_ioctl+0x4220/0x4220 [ 3339.607948] __x64_sys_ioctl+0x19a/0x210 [ 3339.608761] do_syscall_64+0x33/0x40 [ 3339.609496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3339.610523] RIP: 0033:0x7fb4d3c71b19 [ 3339.611259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3339.614916] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3339.616432] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3339.617842] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3339.619261] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3339.620681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3339.622089] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3339.625498] FAULT_INJECTION: forcing a failure. [ 3339.625498] name failslab, interval 1, probability 0, space 0, times 0 [ 3339.627797] CPU: 0 PID: 16721 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3339.629196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3339.630831] Call Trace: [ 3339.631351] dump_stack+0x107/0x167 [ 3339.632092] should_fail.cold+0x5/0xa [ 3339.632850] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3339.633817] should_failslab+0x5/0x20 [ 3339.634566] kmem_cache_alloc_trace+0x55/0x320 [ 3339.634735] FAULT_INJECTION: forcing a failure. [ 3339.634735] name failslab, interval 1, probability 0, space 0, times 0 [ 3339.635470] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3339.635493] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3339.635525] ? lock_chain_count+0x20/0x20 [ 3339.635545] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.635571] ? do_swap+0x134/0x210 [ 3339.635592] ? sort_r+0x239/0x360 [ 3339.635616] ? ext4_file_open+0xa50/0xa50 [ 3339.643656] ext4_getfsmap+0x695/0x990 [ 3339.644432] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.645435] ? ext4_fsmap_to_internal+0x260/0x260 [ 3339.646381] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3339.647422] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.648459] ext4_ioc_getfsmap+0x2b0/0x620 [ 3339.649288] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3339.650193] ? find_held_lock+0x2c/0x110 [ 3339.650999] ? avc_has_extended_perms+0x675/0xf40 [ 3339.651986] ? lock_downgrade+0x6d0/0x6d0 [ 3339.652810] __ext4_ioctl+0x8ad/0x4220 [ 3339.653586] ? ext4_reset_inode_seed+0x450/0x450 [ 3339.654540] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3339.655580] ? find_held_lock+0x2c/0x110 [ 3339.656400] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3339.657540] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3339.658550] ? do_vfs_ioctl+0x283/0x10d0 [ 3339.659352] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3339.660397] ? generic_block_fiemap+0x60/0x60 [ 3339.661291] ? lock_downgrade+0x6d0/0x6d0 [ 3339.662101] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3339.663051] ? wait_for_completion_io+0x270/0x270 [ 3339.664011] ? selinux_file_ioctl+0xb6/0x270 [ 3339.664886] ? __ext4_ioctl+0x4220/0x4220 [ 3339.665703] __x64_sys_ioctl+0x19a/0x210 [ 3339.666507] do_syscall_64+0x33/0x40 [ 3339.667239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3339.668261] RIP: 0033:0x7fcaa5e39b19 [ 3339.669007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3339.672647] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3339.674142] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3339.675545] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3339.676965] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3339.678374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3339.679786] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3339.681252] CPU: 1 PID: 16730 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3339.682666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3339.684351] Call Trace: [ 3339.684883] dump_stack+0x107/0x167 [ 3339.685617] should_fail.cold+0x5/0xa [ 3339.686385] ? create_object.isra.0+0x3a/0xa30 [ 3339.687318] should_failslab+0x5/0x20 [ 3339.688107] kmem_cache_alloc+0x5b/0x310 [ 3339.688964] ? lock_downgrade+0x6d0/0x6d0 [ 3339.689958] create_object.isra.0+0x3a/0xa30 [ 3339.690839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3339.691892] kmem_cache_alloc_trace+0x151/0x320 [ 3339.692840] ext4_getfsmap_datadev+0x719/0x25c0 [ 3339.693788] ? lock_chain_count+0x20/0x20 [ 3339.694628] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.695670] ? do_swap+0x134/0x210 [ 3339.696412] ? sort_r+0x239/0x360 [ 3339.697114] ? ext4_file_open+0xa50/0xa50 [ 3339.697958] ext4_getfsmap+0x695/0x990 [ 3339.698736] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.699773] ? ext4_fsmap_to_internal+0x260/0x260 [ 3339.700759] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3339.701826] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.702867] ext4_ioc_getfsmap+0x2b0/0x620 [ 3339.703733] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3339.704821] ? find_held_lock+0x2c/0x110 [ 3339.705854] ? avc_has_extended_perms+0x675/0xf40 [ 3339.707113] ? lock_downgrade+0x6d0/0x6d0 [ 3339.708163] __ext4_ioctl+0x8ad/0x4220 [ 3339.709160] ? ext4_reset_inode_seed+0x450/0x450 [ 3339.710209] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3339.711262] ? find_held_lock+0x2c/0x110 [ 3339.712098] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3339.713258] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3339.714322] ? do_vfs_ioctl+0x283/0x10d0 [ 3339.715142] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3339.716220] ? generic_block_fiemap+0x60/0x60 [ 3339.717126] ? lock_downgrade+0x6d0/0x6d0 [ 3339.717972] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3339.718952] ? wait_for_completion_io+0x270/0x270 [ 3339.719932] ? selinux_file_ioctl+0xb6/0x270 [ 3339.720812] ? __ext4_ioctl+0x4220/0x4220 [ 3339.721666] __x64_sys_ioctl+0x19a/0x210 [ 3339.722496] do_syscall_64+0x33/0x40 [ 3339.723256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3339.724309] RIP: 0033:0x7f81caa8db19 [ 3339.725063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3339.728765] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3339.730309] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3339.731734] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3339.733183] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3339.734617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3339.736053] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:43:05 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:43:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:05 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x14}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:43:05 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 78) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 89) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:05 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7400, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:43:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 85) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3339.945769] FAULT_INJECTION: forcing a failure. [ 3339.945769] name failslab, interval 1, probability 0, space 0, times 0 [ 3339.948134] CPU: 0 PID: 16749 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3339.949529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3339.951176] Call Trace: [ 3339.951710] dump_stack+0x107/0x167 [ 3339.952446] should_fail.cold+0x5/0xa [ 3339.953214] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3339.954177] should_failslab+0x5/0x20 [ 3339.954935] kmem_cache_alloc_trace+0x55/0x320 [ 3339.955845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3339.956882] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3339.957830] ? lock_chain_count+0x20/0x20 [ 3339.958655] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.959679] ? do_swap+0x134/0x210 [ 3339.960400] ? sort_r+0x239/0x360 [ 3339.961123] ? ext4_file_open+0xa50/0xa50 [ 3339.961959] ext4_getfsmap+0x695/0x990 [ 3339.962754] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.963772] ? ext4_fsmap_to_internal+0x260/0x260 [ 3339.964747] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3339.965084] FAULT_INJECTION: forcing a failure. [ 3339.965084] name failslab, interval 1, probability 0, space 0, times 0 [ 3339.965801] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3339.965840] ext4_ioc_getfsmap+0x2b0/0x620 [ 3339.965857] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3339.965874] ? find_held_lock+0x2c/0x110 [ 3339.965904] ? avc_has_extended_perms+0x675/0xf40 [ 3339.972640] ? lock_downgrade+0x6d0/0x6d0 [ 3339.973473] __ext4_ioctl+0x8ad/0x4220 [ 3339.974259] ? ext4_reset_inode_seed+0x450/0x450 [ 3339.975207] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3339.976266] ? find_held_lock+0x2c/0x110 [ 3339.977091] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3339.978239] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3339.979283] ? do_vfs_ioctl+0x283/0x10d0 [ 3339.980102] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3339.981150] ? generic_block_fiemap+0x60/0x60 [ 3339.982046] ? lock_downgrade+0x6d0/0x6d0 [ 3339.982872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3339.983842] ? wait_for_completion_io+0x270/0x270 [ 3339.984826] ? selinux_file_ioctl+0xb6/0x270 [ 3339.985715] ? __ext4_ioctl+0x4220/0x4220 [ 3339.986558] __x64_sys_ioctl+0x19a/0x210 [ 3339.987372] do_syscall_64+0x33/0x40 [ 3339.988125] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3339.989148] RIP: 0033:0x7fb4d3c71b19 [ 3339.989897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3339.993577] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3339.995096] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3339.996533] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3339.997955] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3339.999388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3340.000829] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3340.002314] CPU: 1 PID: 16752 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3340.003723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3340.005437] Call Trace: [ 3340.005988] dump_stack+0x107/0x167 [ 3340.006719] should_fail.cold+0x5/0xa [ 3340.007497] ? create_object.isra.0+0x3a/0xa30 [ 3340.008451] should_failslab+0x5/0x20 [ 3340.009231] kmem_cache_alloc+0x5b/0x310 [ 3340.010064] create_object.isra.0+0x3a/0xa30 [ 3340.010960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3340.012189] kmem_cache_alloc_trace+0x151/0x320 [ 3340.013368] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3340.014563] ? lock_chain_count+0x20/0x20 [ 3340.015595] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.016888] ? do_swap+0x134/0x210 [ 3340.017632] ? sort_r+0x239/0x360 [ 3340.018346] ? ext4_file_open+0xa50/0xa50 [ 3340.019191] ext4_getfsmap+0x695/0x990 [ 3340.019990] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.021060] ? ext4_fsmap_to_internal+0x260/0x260 [ 3340.022029] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3340.023094] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.024148] ext4_ioc_getfsmap+0x2b0/0x620 [ 3340.025023] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3340.025946] ? find_held_lock+0x2c/0x110 [ 3340.026758] ? avc_has_extended_perms+0x675/0xf40 [ 3340.027775] ? lock_downgrade+0x6d0/0x6d0 [ 3340.028629] __ext4_ioctl+0x8ad/0x4220 [ 3340.029436] ? ext4_reset_inode_seed+0x450/0x450 [ 3340.030399] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3340.031448] ? find_held_lock+0x2c/0x110 [ 3340.032294] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3340.033460] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3340.034505] ? do_vfs_ioctl+0x283/0x10d0 [ 3340.035326] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3340.035884] FAULT_INJECTION: forcing a failure. [ 3340.035884] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.036385] ? generic_block_fiemap+0x60/0x60 [ 3340.036405] ? lock_downgrade+0x6d0/0x6d0 [ 3340.036422] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3340.036446] ? wait_for_completion_io+0x270/0x270 [ 3340.042232] ? selinux_file_ioctl+0xb6/0x270 [ 3340.043118] ? __ext4_ioctl+0x4220/0x4220 [ 3340.043961] __x64_sys_ioctl+0x19a/0x210 [ 3340.044779] do_syscall_64+0x33/0x40 [ 3340.045543] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3340.046570] RIP: 0033:0x7f81caa8db19 [ 3340.047326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3340.051037] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3340.052569] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3340.054014] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3340.055445] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3340.056903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3340.058344] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3340.059798] CPU: 0 PID: 16757 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3340.061199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3340.062840] Call Trace: [ 3340.063368] dump_stack+0x107/0x167 [ 3340.064100] should_fail.cold+0x5/0xa [ 3340.064861] ? create_object.isra.0+0x3a/0xa30 [ 3340.065767] should_failslab+0x5/0x20 [ 3340.066519] kmem_cache_alloc+0x5b/0x310 [ 3340.067329] create_object.isra.0+0x3a/0xa30 [ 3340.068211] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3340.069261] kmem_cache_alloc_trace+0x151/0x320 [ 3340.070206] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3340.071167] ? lock_chain_count+0x20/0x20 [ 3340.071990] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.073026] ? do_swap+0x134/0x210 [ 3340.073745] ? sort_r+0x239/0x360 [ 3340.074431] ? ext4_file_open+0xa50/0xa50 [ 3340.075258] ext4_getfsmap+0x695/0x990 [ 3340.076027] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.077041] ? ext4_fsmap_to_internal+0x260/0x260 [ 3340.077996] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3340.079047] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.080084] ext4_ioc_getfsmap+0x2b0/0x620 [ 3340.080916] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3340.081820] ? find_held_lock+0x2c/0x110 [ 3340.082629] ? avc_has_extended_perms+0x675/0xf40 [ 3340.083619] ? lock_downgrade+0x6d0/0x6d0 [ 3340.084451] __ext4_ioctl+0x8ad/0x4220 [ 3340.085231] ? ext4_reset_inode_seed+0x450/0x450 [ 3340.086165] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3340.087200] ? find_held_lock+0x2c/0x110 [ 3340.088024] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3340.089168] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3340.090194] ? do_vfs_ioctl+0x283/0x10d0 [ 3340.090998] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3340.092063] ? generic_block_fiemap+0x60/0x60 [ 3340.092958] ? lock_downgrade+0x6d0/0x6d0 [ 3340.093786] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3340.094734] ? wait_for_completion_io+0x270/0x270 [ 3340.095701] ? selinux_file_ioctl+0xb6/0x270 [ 3340.096584] ? __ext4_ioctl+0x4220/0x4220 [ 3340.097405] __x64_sys_ioctl+0x19a/0x210 [ 3340.098215] do_syscall_64+0x33/0x40 [ 3340.098955] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3340.099975] RIP: 0033:0x7fcaa5e39b19 [ 3340.100718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3340.104397] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3340.105901] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3340.107312] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3340.108738] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3340.110147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3340.111553] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:43:05 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 79) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:05 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 3340.147589] blktrace: Concurrent blktraces are not allowed on loop8 [ 3340.200220] FAULT_INJECTION: forcing a failure. [ 3340.200220] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.203122] CPU: 0 PID: 16765 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3340.204502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3340.206136] Call Trace: [ 3340.206663] dump_stack+0x107/0x167 [ 3340.207384] should_fail.cold+0x5/0xa [ 3340.208156] ? create_object.isra.0+0x3a/0xa30 [ 3340.209059] should_failslab+0x5/0x20 [ 3340.209814] kmem_cache_alloc+0x5b/0x310 [ 3340.210624] create_object.isra.0+0x3a/0xa30 [ 3340.211488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3340.212523] kmem_cache_alloc_trace+0x151/0x320 [ 3340.213456] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3340.214398] ? lock_chain_count+0x20/0x20 [ 3340.215217] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.216238] ? do_swap+0x134/0x210 [ 3340.216942] ? sort_r+0x239/0x360 [ 3340.217638] ? ext4_file_open+0xa50/0xa50 [ 3340.218465] ext4_getfsmap+0x695/0x990 [ 3340.219240] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.220255] ? ext4_fsmap_to_internal+0x260/0x260 [ 3340.221209] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3340.222257] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.223277] ext4_ioc_getfsmap+0x2b0/0x620 [ 3340.224129] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3340.225027] ? find_held_lock+0x2c/0x110 [ 3340.225836] ? avc_has_extended_perms+0x675/0xf40 [ 3340.226828] ? lock_downgrade+0x6d0/0x6d0 [ 3340.227653] __ext4_ioctl+0x8ad/0x4220 [ 3340.228441] ? ext4_reset_inode_seed+0x450/0x450 [ 3340.229384] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3340.230421] ? find_held_lock+0x2c/0x110 [ 3340.231234] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3340.232389] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3340.233421] ? do_vfs_ioctl+0x283/0x10d0 [ 3340.234224] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3340.235265] ? generic_block_fiemap+0x60/0x60 [ 3340.236153] ? lock_downgrade+0x6d0/0x6d0 [ 3340.236969] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3340.237924] ? wait_for_completion_io+0x270/0x270 [ 3340.238897] ? selinux_file_ioctl+0xb6/0x270 [ 3340.239761] ? __ext4_ioctl+0x4220/0x4220 [ 3340.240595] __x64_sys_ioctl+0x19a/0x210 [ 3340.241402] do_syscall_64+0x33/0x40 [ 3340.242145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3340.243153] RIP: 0033:0x7fb4d3c71b19 [ 3340.243916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3340.248332] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3340.250138] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3340.251818] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3340.253532] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3340.255205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3340.256915] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:43:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 86) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:05 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x15}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:43:05 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a00, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:43:05 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 3340.346818] FAULT_INJECTION: forcing a failure. [ 3340.346818] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.349153] CPU: 0 PID: 16771 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3340.350495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3340.352106] Call Trace: [ 3340.352627] dump_stack+0x107/0x167 [ 3340.353387] should_fail.cold+0x5/0xa [ 3340.354265] ? ext4_getfsmap_datadev+0x719/0x25c0 [ 3340.355357] should_failslab+0x5/0x20 [ 3340.356242] kmem_cache_alloc_trace+0x55/0x320 [ 3340.357283] ? ext4_get_group_desc+0x2a0/0x560 [ 3340.358331] ext4_getfsmap_datadev+0x719/0x25c0 [ 3340.359399] ? lock_chain_count+0x20/0x20 [ 3340.360349] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.361507] ? do_swap+0x134/0x210 [ 3340.362324] ? sort_r+0x239/0x360 [ 3340.363113] ? ext4_file_open+0xa50/0xa50 [ 3340.364055] ext4_getfsmap+0x695/0x990 [ 3340.364962] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.366125] ? ext4_fsmap_to_internal+0x260/0x260 [ 3340.367220] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3340.368434] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3340.369624] ext4_ioc_getfsmap+0x2b0/0x620 [ 3340.370578] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3340.371619] ? find_held_lock+0x2c/0x110 [ 3340.372570] ? avc_has_extended_perms+0x675/0xf40 [ 3340.373601] ? lock_downgrade+0x6d0/0x6d0 [ 3340.374387] __ext4_ioctl+0x8ad/0x4220 [ 3340.375130] ? ext4_reset_inode_seed+0x450/0x450 [ 3340.376028] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3340.377026] ? find_held_lock+0x2c/0x110 [ 3340.377813] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3340.378901] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3340.379879] ? do_vfs_ioctl+0x283/0x10d0 [ 3340.380770] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3340.381949] ? generic_block_fiemap+0x60/0x60 [ 3340.382952] ? lock_downgrade+0x6d0/0x6d0 [ 3340.383885] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3340.384982] ? wait_for_completion_io+0x270/0x270 [ 3340.386086] ? selinux_file_ioctl+0xb6/0x270 [ 3340.387074] ? __ext4_ioctl+0x4220/0x4220 [ 3340.388004] __x64_sys_ioctl+0x19a/0x210 [ 3340.388927] do_syscall_64+0x33/0x40 [ 3340.389773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3340.390924] RIP: 0033:0x7fcaa5e39b19 [ 3340.391765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3340.395905] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3340.397626] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3340.399233] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3340.400720] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3340.402051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3340.403388] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3340.412986] blktrace: Concurrent blktraces are not allowed on loop8 [ 3341.540284] Bluetooth: hci2: command 0x0406 tx timeout [ 3345.636330] Bluetooth: hci6: command 0x0406 tx timeout [ 3345.636392] Bluetooth: hci5: command 0x0406 tx timeout 19:43:20 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x16}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:43:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:20 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 19:43:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40086604, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 80) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:20 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7d03, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:43:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 87) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:20 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000025c0)=ANY=[@ANYBLOB="b4080000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) r4 = openat(r3, 0x0, 0x18000, 0x80) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000005c0)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}], 0x9, "88542c26331542"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000015c0)={r14, r13, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000510c0)={0x100000000, [{r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xf, "8a7e3c59a411b6"}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) [ 3355.062584] FAULT_INJECTION: forcing a failure. [ 3355.062584] name failslab, interval 1, probability 0, space 0, times 0 [ 3355.064190] CPU: 0 PID: 16789 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3355.065095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3355.066169] Call Trace: [ 3355.066517] dump_stack+0x107/0x167 [ 3355.066985] should_fail.cold+0x5/0xa [ 3355.067481] ? create_object.isra.0+0x3a/0xa30 [ 3355.068092] should_failslab+0x5/0x20 [ 3355.068592] kmem_cache_alloc+0x5b/0x310 [ 3355.069130] ? lock_downgrade+0x6d0/0x6d0 [ 3355.069680] create_object.isra.0+0x3a/0xa30 [ 3355.070247] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3355.070908] kmem_cache_alloc_trace+0x151/0x320 [ 3355.071517] ext4_getfsmap_datadev+0x719/0x25c0 [ 3355.072123] ? lock_chain_count+0x20/0x20 [ 3355.072677] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.073341] ? do_swap+0x134/0x210 [ 3355.073805] ? sort_r+0x239/0x360 [ 3355.074250] ? ext4_file_open+0xa50/0xa50 [ 3355.074793] ext4_getfsmap+0x695/0x990 [ 3355.075300] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.075957] ? ext4_fsmap_to_internal+0x260/0x260 [ 3355.076589] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3355.077285] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.077960] ext4_ioc_getfsmap+0x2b0/0x620 [ 3355.078499] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3355.079098] ? find_held_lock+0x2c/0x110 [ 3355.079636] ? avc_has_extended_perms+0x675/0xf40 [ 3355.080287] ? lock_downgrade+0x6d0/0x6d0 [ 3355.080826] __ext4_ioctl+0x8ad/0x4220 [ 3355.081339] ? ext4_reset_inode_seed+0x450/0x450 [ 3355.081962] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3355.082642] ? find_held_lock+0x2c/0x110 [ 3355.083178] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3355.083923] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3355.084600] ? do_vfs_ioctl+0x283/0x10d0 [ 3355.085124] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3355.085807] ? generic_block_fiemap+0x60/0x60 [ 3355.086383] ? lock_downgrade+0x6d0/0x6d0 [ 3355.086913] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3355.087547] ? wait_for_completion_io+0x270/0x270 [ 3355.088193] ? selinux_file_ioctl+0xb6/0x270 [ 3355.088761] ? __ext4_ioctl+0x4220/0x4220 [ 3355.089310] __x64_sys_ioctl+0x19a/0x210 [ 3355.089849] do_syscall_64+0x33/0x40 [ 3355.090340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3355.091016] RIP: 0033:0x7fcaa5e39b19 [ 3355.091508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3355.093955] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3355.094961] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3355.095893] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3355.096849] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3355.097799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3355.098749] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3355.103356] blktrace: Concurrent blktraces are not allowed on loop8 [ 3355.120199] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 3355.122831] FAULT_INJECTION: forcing a failure. [ 3355.122831] name failslab, interval 1, probability 0, space 0, times 0 [ 3355.124487] CPU: 0 PID: 16801 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3355.124788] FAULT_INJECTION: forcing a failure. [ 3355.124788] name failslab, interval 1, probability 0, space 0, times 0 [ 3355.125399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3355.125404] Call Trace: [ 3355.125418] dump_stack+0x107/0x167 [ 3355.125431] should_fail.cold+0x5/0xa [ 3355.125444] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3355.125454] should_failslab+0x5/0x20 [ 3355.125465] kmem_cache_alloc_trace+0x55/0x320 [ 3355.125474] ? ext4_bg_num_gdb+0x172/0x250 [ 3355.125488] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3355.125508] ? lock_chain_count+0x20/0x20 [ 3355.125519] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.125536] ? do_swap+0x134/0x210 [ 3355.125548] ? sort_r+0x239/0x360 [ 3355.125558] ? ext4_file_open+0xa50/0xa50 [ 3355.125577] ext4_getfsmap+0x695/0x990 [ 3355.136121] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.136786] ? ext4_fsmap_to_internal+0x260/0x260 [ 3355.137409] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3355.138087] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.138752] ext4_ioc_getfsmap+0x2b0/0x620 [ 3355.139297] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3355.139883] ? find_held_lock+0x2c/0x110 [ 3355.140417] ? avc_has_extended_perms+0x675/0xf40 [ 3355.141059] ? lock_downgrade+0x6d0/0x6d0 [ 3355.141597] __ext4_ioctl+0x8ad/0x4220 [ 3355.142102] ? ext4_reset_inode_seed+0x450/0x450 [ 3355.142716] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3355.143392] ? find_held_lock+0x2c/0x110 [ 3355.143919] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3355.144665] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3355.145331] ? do_vfs_ioctl+0x283/0x10d0 [ 3355.145850] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3355.146523] ? generic_block_fiemap+0x60/0x60 [ 3355.147098] ? lock_downgrade+0x6d0/0x6d0 [ 3355.147630] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3355.148257] ? wait_for_completion_io+0x270/0x270 [ 3355.148881] ? selinux_file_ioctl+0xb6/0x270 [ 3355.149449] ? __ext4_ioctl+0x4220/0x4220 [ 3355.149981] __x64_sys_ioctl+0x19a/0x210 [ 3355.150507] do_syscall_64+0x33/0x40 [ 3355.150987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3355.151645] RIP: 0033:0x7fb4d3c71b19 [ 3355.152120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3355.154487] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3355.155461] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3355.156380] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3355.157295] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3355.158179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3355.159089] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3355.160002] CPU: 1 PID: 16800 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3355.161589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3355.163398] Call Trace: [ 3355.163988] dump_stack+0x107/0x167 [ 3355.164804] should_fail.cold+0x5/0xa [ 3355.165660] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3355.166728] should_failslab+0x5/0x20 [ 3355.167565] kmem_cache_alloc_trace+0x55/0x320 [ 3355.168565] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3355.169664] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3355.170698] ? lock_chain_count+0x20/0x20 [ 3355.171589] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.172711] ? do_swap+0x134/0x210 [ 3355.173478] ? sort_r+0x239/0x360 [ 3355.174226] ? ext4_file_open+0xa50/0xa50 [ 3355.175124] ext4_getfsmap+0x695/0x990 [ 3355.175958] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.177062] ? ext4_fsmap_to_internal+0x260/0x260 [ 3355.178104] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3355.179475] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.180854] ext4_ioc_getfsmap+0x2b0/0x620 [ 3355.181978] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3355.182977] ? find_held_lock+0x2c/0x110 [ 3355.183861] ? avc_has_extended_perms+0x675/0xf40 [ 3355.184954] ? lock_downgrade+0x6d0/0x6d0 [ 3355.185847] __ext4_ioctl+0x8ad/0x4220 [ 3355.186693] ? ext4_reset_inode_seed+0x450/0x450 [ 3355.187710] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3355.188856] ? find_held_lock+0x2c/0x110 [ 3355.189744] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3355.190985] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3355.192114] ? do_vfs_ioctl+0x283/0x10d0 [ 3355.193002] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3355.194117] ? generic_block_fiemap+0x60/0x60 [ 3355.195087] ? lock_downgrade+0x6d0/0x6d0 [ 3355.195977] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3355.197018] ? wait_for_completion_io+0x270/0x270 [ 3355.198054] ? selinux_file_ioctl+0xb6/0x270 [ 3355.199019] ? __ext4_ioctl+0x4220/0x4220 [ 3355.199967] __x64_sys_ioctl+0x19a/0x210 [ 3355.200872] do_syscall_64+0x33/0x40 [ 3355.201685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3355.202778] RIP: 0033:0x7f81caa8db19 19:43:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3355.203578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3355.207753] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3355.209395] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3355.210923] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3355.212455] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3355.213987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3355.215513] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:43:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 81) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3355.276462] FAULT_INJECTION: forcing a failure. [ 3355.276462] name failslab, interval 1, probability 0, space 0, times 0 [ 3355.277873] CPU: 0 PID: 16816 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3355.278696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3355.279684] Call Trace: [ 3355.280004] dump_stack+0x107/0x167 [ 3355.280452] should_fail.cold+0x5/0xa [ 3355.280906] ? ext4_getfsmap_datadev+0x89d/0x25c0 [ 3355.281485] should_failslab+0x5/0x20 [ 3355.281939] kmem_cache_alloc_trace+0x55/0x320 [ 3355.282480] ? ext4_bg_num_gdb+0x172/0x250 [ 3355.282981] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3355.283545] ? lock_chain_count+0x20/0x20 [ 3355.284035] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.284652] ? do_swap+0x134/0x210 [ 3355.285074] ? sort_r+0x239/0x360 [ 3355.285495] ? ext4_file_open+0xa50/0xa50 [ 3355.285986] ext4_getfsmap+0x695/0x990 [ 3355.286446] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.287045] ? ext4_fsmap_to_internal+0x260/0x260 [ 3355.287618] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3355.288247] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.288853] ext4_ioc_getfsmap+0x2b0/0x620 [ 3355.289351] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3355.289890] ? find_held_lock+0x2c/0x110 [ 3355.290375] ? avc_has_extended_perms+0x675/0xf40 [ 3355.290961] ? lock_downgrade+0x6d0/0x6d0 [ 3355.291450] __ext4_ioctl+0x8ad/0x4220 [ 3355.291914] ? ext4_reset_inode_seed+0x450/0x450 [ 3355.292481] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3355.293099] ? find_held_lock+0x2c/0x110 [ 3355.293585] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3355.294259] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3355.294868] ? do_vfs_ioctl+0x283/0x10d0 [ 3355.295347] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3355.295961] ? generic_block_fiemap+0x60/0x60 [ 3355.296497] ? lock_downgrade+0x6d0/0x6d0 [ 3355.296988] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3355.297559] ? wait_for_completion_io+0x270/0x270 [ 3355.298133] ? selinux_file_ioctl+0xb6/0x270 [ 3355.298650] ? __ext4_ioctl+0x4220/0x4220 [ 3355.299134] __x64_sys_ioctl+0x19a/0x210 [ 3355.299614] do_syscall_64+0x33/0x40 [ 3355.300051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3355.300657] RIP: 0033:0x7fcaa5e39b19 [ 3355.301091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3355.303237] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3355.304126] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3355.304969] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3355.305803] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3355.306638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3355.307472] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3355.331019] FAULT_INJECTION: forcing a failure. [ 3355.331019] name failslab, interval 1, probability 0, space 0, times 0 [ 3355.333732] CPU: 1 PID: 16818 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3355.335223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3355.337023] Call Trace: [ 3355.337602] dump_stack+0x107/0x167 [ 3355.338379] should_fail.cold+0x5/0xa [ 3355.339202] ? create_object.isra.0+0x3a/0xa30 [ 3355.340179] should_failslab+0x5/0x20 [ 3355.341029] kmem_cache_alloc+0x5b/0x310 [ 3355.341900] ? lock_downgrade+0x6d0/0x6d0 [ 3355.342793] create_object.isra.0+0x3a/0xa30 [ 3355.343732] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3355.344851] kmem_cache_alloc_trace+0x151/0x320 [ 3355.345857] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3355.346874] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.347954] ? lock_acquire+0x197/0x470 [ 3355.348835] ? find_held_lock+0x2c/0x110 [ 3355.349709] ? mark_lock+0xf5/0x2df0 [ 3355.350516] ? do_swap+0x134/0x210 [ 3355.351269] ? sort_r+0x239/0x360 [ 3355.352012] ? ext4_file_open+0xa50/0xa50 [ 3355.352931] ext4_getfsmap+0x695/0x990 [ 3355.353771] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.354854] ? ext4_fsmap_to_internal+0x260/0x260 [ 3355.355885] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3355.357038] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3355.358143] ext4_ioc_getfsmap+0x2b0/0x620 [ 3355.359046] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3355.360019] ? find_held_lock+0x2c/0x110 [ 3355.360920] ? avc_has_extended_perms+0x675/0xf40 [ 3355.361993] __ext4_ioctl+0x8ad/0x4220 [ 3355.362837] ? ext4_reset_inode_seed+0x450/0x450 [ 3355.363847] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3355.365016] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3355.366290] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3355.367394] ? do_vfs_ioctl+0x283/0x10d0 [ 3355.368275] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3355.369411] ? generic_block_fiemap+0x60/0x60 [ 3355.370370] ? lock_downgrade+0x6d0/0x6d0 [ 3355.371276] ? clockevents_program_event+0x131/0x360 [ 3355.372387] ? selinux_file_ioctl+0xb6/0x270 [ 3355.373349] ? __ext4_ioctl+0x4220/0x4220 [ 3355.374242] __x64_sys_ioctl+0x19a/0x210 [ 3355.375118] do_syscall_64+0x33/0x40 [ 3355.375920] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3355.377035] RIP: 0033:0x7fb4d3c71b19 [ 3355.377835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3355.381762] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3355.383469] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3355.385345] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3355.387197] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3355.388872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3355.390389] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:43:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 82) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:34 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) pread64(r2, &(0x7f00000001c0)=""/119, 0x77, 0x500000000000) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c005080080007000100000008e1ca09f3526400030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0f15241"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r3, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:43:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 89) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:34 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x17}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:43:34 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:43:34 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x910b, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:43:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40086607, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 91) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3368.717557] blktrace: Concurrent blktraces are not allowed on loop8 [ 3368.749494] FAULT_INJECTION: forcing a failure. [ 3368.749494] name failslab, interval 1, probability 0, space 0, times 0 [ 3368.750803] CPU: 1 PID: 16837 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3368.751580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3368.752584] Call Trace: [ 3368.752893] dump_stack+0x107/0x167 [ 3368.753305] should_fail.cold+0x5/0xa [ 3368.753763] ? create_object.isra.0+0x3a/0xa30 [ 3368.754307] should_failslab+0x5/0x20 [ 3368.754760] kmem_cache_alloc+0x5b/0x310 [ 3368.755253] create_object.isra.0+0x3a/0xa30 [ 3368.755778] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3368.756398] kmem_cache_alloc_trace+0x151/0x320 [ 3368.756992] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3368.757554] ? lock_chain_count+0x20/0x20 [ 3368.758044] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3368.758655] ? do_swap+0x134/0x210 [ 3368.759078] ? sort_r+0x239/0x360 [ 3368.759492] ? ext4_file_open+0xa50/0xa50 [ 3368.759988] ext4_getfsmap+0x695/0x990 [ 3368.760460] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3368.761069] ? ext4_fsmap_to_internal+0x260/0x260 [ 3368.761649] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3368.762270] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3368.762879] ext4_ioc_getfsmap+0x2b0/0x620 [ 3368.763583] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3368.764123] ? find_held_lock+0x2c/0x110 [ 3368.764634] ? avc_has_extended_perms+0x675/0xf40 [ 3368.765433] ? lock_downgrade+0x6d0/0x6d0 [ 3368.765930] __ext4_ioctl+0x8ad/0x4220 [ 3368.766446] ? ext4_reset_inode_seed+0x450/0x450 [ 3368.767200] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3368.767886] ? find_held_lock+0x2c/0x110 [ 3368.768547] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3368.769360] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3368.770199] ? do_vfs_ioctl+0x283/0x10d0 [ 3368.770783] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3368.771612] ? generic_block_fiemap+0x60/0x60 [ 3368.772255] ? lock_downgrade+0x6d0/0x6d0 [ 3368.772898] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3368.773588] ? wait_for_completion_io+0x270/0x270 [ 3368.774277] ? selinux_file_ioctl+0xb6/0x270 [ 3368.774893] ? __ext4_ioctl+0x4220/0x4220 [ 3368.775488] __x64_sys_ioctl+0x19a/0x210 [ 3368.776033] do_syscall_64+0x33/0x40 [ 3368.776596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3368.777291] RIP: 0033:0x7fcaa5e39b19 [ 3368.777815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3368.780095] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3368.781220] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3368.782095] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3368.782988] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3368.783778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3368.784578] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3368.805729] FAULT_INJECTION: forcing a failure. 19:43:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x6609, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3368.805729] name failslab, interval 1, probability 0, space 0, times 0 [ 3368.808580] CPU: 0 PID: 16833 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3368.810038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3368.811783] Call Trace: [ 3368.812342] dump_stack+0x107/0x167 [ 3368.813125] should_fail.cold+0x5/0xa [ 3368.813933] ? create_object.isra.0+0x3a/0xa30 [ 3368.814891] should_failslab+0x5/0x20 [ 3368.815694] kmem_cache_alloc+0x5b/0x310 [ 3368.816560] ? lock_downgrade+0x6d0/0x6d0 [ 3368.817448] create_object.isra.0+0x3a/0xa30 [ 3368.818369] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3368.819442] kmem_cache_alloc_trace+0x151/0x320 [ 3368.820440] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3368.820483] FAULT_INJECTION: forcing a failure. [ 3368.820483] name failslab, interval 1, probability 0, space 0, times 0 [ 3368.821441] ? find_held_lock+0x2c/0x110 [ 3368.821462] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3368.821490] ? do_swap+0x134/0x210 [ 3368.825401] ? sort_r+0x239/0x360 [ 3368.826128] ? ext4_file_open+0xa50/0xa50 [ 3368.826998] ext4_getfsmap+0x695/0x990 [ 3368.827812] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3368.828894] ? ext4_fsmap_to_internal+0x260/0x260 [ 3368.829906] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3368.831019] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3368.832107] ext4_ioc_getfsmap+0x2b0/0x620 [ 3368.833006] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3368.833970] ? find_held_lock+0x2c/0x110 [ 3368.834828] ? avc_has_extended_perms+0x675/0xf40 [ 3368.835883] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3368.836836] ? _raw_spin_unlock_irq+0x27/0x30 [ 3368.837779] __ext4_ioctl+0x8ad/0x4220 [ 3368.838606] ? __schedule+0x82c/0x1ea0 [ 3368.839430] ? ext4_reset_inode_seed+0x450/0x450 [ 3368.840431] ? io_schedule_timeout+0x140/0x140 [ 3368.841393] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3368.842536] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3368.843733] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3368.844829] ? do_vfs_ioctl+0x283/0x10d0 [ 3368.845677] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3368.846770] ? generic_block_fiemap+0x60/0x60 [ 3368.847709] ? lock_downgrade+0x6d0/0x6d0 [ 3368.848586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3368.849594] ? wait_for_completion_io+0x270/0x270 [ 3368.850615] ? selinux_file_ioctl+0xb6/0x270 [ 3368.851566] ? __ext4_ioctl+0x4220/0x4220 [ 3368.852457] __x64_sys_ioctl+0x19a/0x210 [ 3368.853306] do_syscall_64+0x33/0x40 [ 3368.854087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3368.855163] RIP: 0033:0x7fb4d3c71b19 [ 3368.855947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3368.859830] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3368.861441] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3368.862934] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3368.864448] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3368.865938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3368.867430] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3368.868957] CPU: 1 PID: 16840 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3368.869768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3368.870781] Call Trace: [ 3368.871090] dump_stack+0x107/0x167 [ 3368.871506] should_fail.cold+0x5/0xa [ 3368.871943] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3368.872505] should_failslab+0x5/0x20 [ 3368.872937] kmem_cache_alloc_trace+0x55/0x320 [ 3368.873458] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3368.874032] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3368.874577] ? lock_chain_count+0x20/0x20 [ 3368.875041] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3368.875620] ? do_swap+0x134/0x210 [ 3368.876023] ? sort_r+0x239/0x360 [ 3368.876425] ? ext4_file_open+0xa50/0xa50 [ 3368.876896] ext4_getfsmap+0x695/0x990 [ 3368.877336] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3368.877910] ? ext4_fsmap_to_internal+0x260/0x260 [ 3368.878457] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3368.879051] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3368.879636] ext4_ioc_getfsmap+0x2b0/0x620 [ 3368.880115] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3368.880658] ? find_held_lock+0x2c/0x110 [ 3368.881122] ? avc_has_extended_perms+0x675/0xf40 [ 3368.881688] ? lock_downgrade+0x6d0/0x6d0 [ 3368.882160] __ext4_ioctl+0x8ad/0x4220 [ 3368.882603] ? ext4_reset_inode_seed+0x450/0x450 [ 3368.883141] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3368.883732] ? find_held_lock+0x2c/0x110 [ 3368.884202] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3368.884861] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3368.885449] ? do_vfs_ioctl+0x283/0x10d0 [ 3368.885908] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3368.886499] ? generic_block_fiemap+0x60/0x60 [ 3368.887006] ? lock_downgrade+0x6d0/0x6d0 [ 3368.887478] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3368.888019] ? wait_for_completion_io+0x270/0x270 [ 3368.888581] ? selinux_file_ioctl+0xb6/0x270 [ 3368.889079] ? __ext4_ioctl+0x4220/0x4220 [ 3368.889551] __x64_sys_ioctl+0x19a/0x210 [ 3368.890014] do_syscall_64+0x33/0x40 [ 3368.890436] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3368.891014] RIP: 0033:0x7f81caa8db19 [ 3368.891439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3368.893522] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3368.894385] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3368.895188] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3368.895995] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3368.896804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3368.897608] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:43:34 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) [ 3368.949182] blktrace: Concurrent blktraces are not allowed on loop8 19:43:34 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xdc03, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:43:34 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:43:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 83) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40087602, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3369.017398] blktrace: Concurrent blktraces are not allowed on loop8 19:43:34 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x18}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:43:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:34 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:43:34 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xde03, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3369.091204] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 3369.093079] blktrace: Concurrent blktraces are not allowed on loop8 19:43:34 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) openat(r3, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3369.105699] FAULT_INJECTION: forcing a failure. [ 3369.105699] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.108501] CPU: 0 PID: 16871 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3369.110053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3369.111914] Call Trace: [ 3369.112520] dump_stack+0x107/0x167 [ 3369.113340] should_fail.cold+0x5/0xa [ 3369.114193] ? create_object.isra.0+0x3a/0xa30 [ 3369.115209] should_failslab+0x5/0x20 [ 3369.116063] kmem_cache_alloc+0x5b/0x310 [ 3369.116985] create_object.isra.0+0x3a/0xa30 [ 3369.117969] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3369.119103] kmem_cache_alloc_trace+0x151/0x320 [ 3369.120146] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3369.121212] ? lock_chain_count+0x20/0x20 [ 3369.122136] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.123262] ? do_swap+0x134/0x210 [ 3369.124057] ? sort_r+0x239/0x360 [ 3369.124843] ? ext4_file_open+0xa50/0xa50 [ 3369.125771] ext4_getfsmap+0x695/0x990 [ 3369.126641] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.127784] ? ext4_fsmap_to_internal+0x260/0x260 [ 3369.128866] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3369.130045] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.131197] ext4_ioc_getfsmap+0x2b0/0x620 [ 3369.132159] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3369.133184] ? find_held_lock+0x2c/0x110 [ 3369.134094] ? avc_has_extended_perms+0x675/0xf40 [ 3369.135205] ? lock_downgrade+0x6d0/0x6d0 [ 3369.136135] __ext4_ioctl+0x8ad/0x4220 [ 3369.137017] ? ext4_reset_inode_seed+0x450/0x450 [ 3369.138075] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3369.139245] ? find_held_lock+0x2c/0x110 [ 3369.140163] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3369.141455] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3369.142600] ? do_vfs_ioctl+0x283/0x10d0 [ 3369.143502] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3369.144682] ? generic_block_fiemap+0x60/0x60 [ 3369.145680] ? lock_downgrade+0x6d0/0x6d0 [ 3369.146604] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3369.147675] ? wait_for_completion_io+0x270/0x270 [ 3369.148762] ? selinux_file_ioctl+0xb6/0x270 [ 3369.149743] ? __ext4_ioctl+0x4220/0x4220 [ 3369.150672] __x64_sys_ioctl+0x19a/0x210 [ 3369.151588] do_syscall_64+0x33/0x40 [ 3369.152429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3369.153572] RIP: 0033:0x7fb4d3c71b19 [ 3369.154404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3369.158517] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3369.160214] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3369.161810] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3369.163393] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3369.164991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3369.166574] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3369.198398] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 3369.202776] blktrace: Concurrent blktraces are not allowed on loop8 19:43:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 92) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:34 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:43:34 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x19}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) [ 3369.220839] FAULT_INJECTION: forcing a failure. [ 3369.220839] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.222322] CPU: 1 PID: 16889 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3369.223127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3369.224034] Call Trace: [ 3369.224351] dump_stack+0x107/0x167 [ 3369.224780] should_fail.cold+0x5/0xa [ 3369.225305] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3369.225873] should_failslab+0x5/0x20 [ 3369.226318] kmem_cache_alloc_trace+0x55/0x320 [ 3369.226844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3369.227435] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3369.227986] ? lock_chain_count+0x20/0x20 [ 3369.228473] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.229052] ? do_swap+0x134/0x210 [ 3369.229484] ? sort_r+0x239/0x360 [ 3369.229967] ? ext4_file_open+0xa50/0xa50 [ 3369.230451] ext4_getfsmap+0x695/0x990 [ 3369.230893] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.231476] ? ext4_fsmap_to_internal+0x260/0x260 [ 3369.231997] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3369.232614] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.233178] ext4_ioc_getfsmap+0x2b0/0x620 [ 3369.233667] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3369.234195] ? find_held_lock+0x2c/0x110 [ 3369.234669] ? avc_has_extended_perms+0x675/0xf40 [ 3369.235243] ? lock_downgrade+0x6d0/0x6d0 [ 3369.235696] __ext4_ioctl+0x8ad/0x4220 [ 3369.236143] ? ext4_reset_inode_seed+0x450/0x450 [ 3369.236671] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3369.237276] ? find_held_lock+0x2c/0x110 [ 3369.237723] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3369.238341] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3369.238895] ? do_vfs_ioctl+0x283/0x10d0 [ 3369.239328] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3369.239890] ? generic_block_fiemap+0x60/0x60 [ 3369.240383] ? lock_downgrade+0x6d0/0x6d0 [ 3369.240859] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3369.241378] ? wait_for_completion_io+0x270/0x270 [ 3369.241934] ? selinux_file_ioctl+0xb6/0x270 [ 3369.242419] ? __ext4_ioctl+0x4220/0x4220 [ 3369.242897] __x64_sys_ioctl+0x19a/0x210 [ 3369.243339] do_syscall_64+0x33/0x40 [ 3369.243766] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3369.244321] RIP: 0033:0x7fcaa5e39b19 [ 3369.244555] FAULT_INJECTION: forcing a failure. [ 3369.244555] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.244757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3369.244774] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3369.250059] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3369.250825] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3369.251592] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3369.252355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3369.253132] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3369.253923] CPU: 0 PID: 16888 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3369.255495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3369.257377] Call Trace: [ 3369.257979] dump_stack+0x107/0x167 [ 3369.258801] should_fail.cold+0x5/0xa [ 3369.259661] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3369.260754] should_failslab+0x5/0x20 [ 3369.261610] kmem_cache_alloc_trace+0x55/0x320 [ 3369.262634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3369.263780] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3369.264853] ? lock_chain_count+0x20/0x20 [ 3369.265789] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.266938] ? do_swap+0x134/0x210 [ 3369.267738] ? sort_r+0x239/0x360 [ 3369.268523] ? ext4_file_open+0xa50/0xa50 [ 3369.269457] ext4_getfsmap+0x695/0x990 [ 3369.270336] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.271478] ? ext4_fsmap_to_internal+0x260/0x260 [ 3369.272576] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3369.273765] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.274927] ext4_ioc_getfsmap+0x2b0/0x620 [ 3369.275876] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3369.276911] ? find_held_lock+0x2c/0x110 [ 3369.277835] ? avc_has_extended_perms+0x675/0xf40 [ 3369.278951] ? lock_downgrade+0x6d0/0x6d0 [ 3369.279889] __ext4_ioctl+0x8ad/0x4220 [ 3369.280789] ? ext4_reset_inode_seed+0x450/0x450 [ 3369.281850] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3369.283028] ? find_held_lock+0x2c/0x110 [ 3369.283956] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3369.285251] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3369.286414] ? do_vfs_ioctl+0x283/0x10d0 [ 3369.287322] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3369.288506] ? generic_block_fiemap+0x60/0x60 [ 3369.289509] ? lock_downgrade+0x6d0/0x6d0 [ 3369.290446] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3369.291527] ? wait_for_completion_io+0x270/0x270 [ 3369.292632] ? selinux_file_ioctl+0xb6/0x270 [ 3369.293621] ? __ext4_ioctl+0x4220/0x4220 [ 3369.294566] __x64_sys_ioctl+0x19a/0x210 [ 3369.295481] do_syscall_64+0x33/0x40 [ 3369.296320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3369.297482] RIP: 0033:0x7f81caa8db19 [ 3369.298321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3369.302464] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3369.304166] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3369.305770] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3369.307369] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3369.308974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3369.310582] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:43:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 91) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:34 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) [ 3369.351019] blktrace: Concurrent blktraces are not allowed on loop8 19:43:34 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xe102, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3369.384480] FAULT_INJECTION: forcing a failure. [ 3369.384480] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.387177] CPU: 0 PID: 16901 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3369.388754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3369.390619] Call Trace: [ 3369.391218] dump_stack+0x107/0x167 [ 3369.392042] should_fail.cold+0x5/0xa [ 3369.392917] ? create_object.isra.0+0x3a/0xa30 [ 3369.393948] should_failslab+0x5/0x20 [ 3369.394807] kmem_cache_alloc+0x5b/0x310 [ 3369.395728] create_object.isra.0+0x3a/0xa30 [ 3369.396732] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3369.397879] kmem_cache_alloc_trace+0x151/0x320 [ 3369.398934] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3369.400017] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.401177] ? lock_acquire+0x197/0x470 [ 3369.402068] ? find_held_lock+0x2c/0x110 [ 3369.402986] ? mark_lock+0xf5/0x2df0 [ 3369.403829] ? do_swap+0x134/0x210 [ 3369.404650] ? sort_r+0x239/0x360 [ 3369.405432] ? ext4_file_open+0xa50/0xa50 [ 3369.406372] ext4_getfsmap+0x695/0x990 [ 3369.407253] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.408408] ? ext4_fsmap_to_internal+0x260/0x260 [ 3369.409499] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3369.410693] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3369.411861] ext4_ioc_getfsmap+0x2b0/0x620 [ 3369.412823] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3369.413860] ? find_held_lock+0x2c/0x110 [ 3369.414782] ? avc_has_extended_perms+0x675/0xf40 [ 3369.415904] ? lock_downgrade+0x6d0/0x6d0 [ 3369.416857] __ext4_ioctl+0x8ad/0x4220 [ 3369.417753] ? ext4_reset_inode_seed+0x450/0x450 [ 3369.418831] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3369.420013] ? find_held_lock+0x2c/0x110 [ 3369.420962] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3369.422257] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3369.423422] ? do_vfs_ioctl+0x283/0x10d0 [ 3369.424336] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3369.425533] ? generic_block_fiemap+0x60/0x60 [ 3369.426545] ? lock_downgrade+0x6d0/0x6d0 [ 3369.427483] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3369.428583] ? wait_for_completion_io+0x270/0x270 [ 3369.429697] ? selinux_file_ioctl+0xb6/0x270 [ 3369.430702] ? __ext4_ioctl+0x4220/0x4220 [ 3369.431646] __x64_sys_ioctl+0x19a/0x210 [ 3369.432587] do_syscall_64+0x33/0x40 [ 3369.433430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3369.434589] RIP: 0033:0x7fcaa5e39b19 [ 3369.435437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3369.439558] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3369.441291] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3369.442899] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3369.444527] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3369.446138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3369.447747] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:43:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 92) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x400c6615, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:49 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xe903, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:43:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x1a}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:43:49 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:43:49 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 93) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:43:49 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) r3 = signalfd(r2, &(0x7f0000000480)={[0x8]}, 0x8) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x8, 0xc9, 0x9, 0x0, 0x1, 0x2040, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0xfef6fcf1aeec4c62, @perf_bp={&(0x7f00000001c0), 0x6}, 0x4000, 0x3, 0x4, 0x4, 0x4, 0xe5, 0x7, 0x0, 0x200, 0x0, 0x3ff}, 0x0, 0x9, r3, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b40078d29d75ffe920", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3384.053438] FAULT_INJECTION: forcing a failure. [ 3384.053438] name failslab, interval 1, probability 0, space 0, times 0 [ 3384.055444] CPU: 0 PID: 16913 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3384.056586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3384.057945] Call Trace: [ 3384.058388] dump_stack+0x107/0x167 [ 3384.058972] should_fail.cold+0x5/0xa [ 3384.059577] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3384.060339] should_failslab+0x5/0x20 [ 3384.060952] kmem_cache_alloc_trace+0x55/0x320 [ 3384.061663] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3384.062490] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3384.063236] ? lock_chain_count+0x20/0x20 [ 3384.063913] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3384.064749] ? do_swap+0x134/0x210 [ 3384.065324] ? sort_r+0x239/0x360 [ 3384.065891] ? ext4_file_open+0xa50/0xa50 [ 3384.066577] ext4_getfsmap+0x695/0x990 [ 3384.067217] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3384.068048] ? ext4_fsmap_to_internal+0x260/0x260 [ 3384.068841] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3384.069716] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3384.070557] ext4_ioc_getfsmap+0x2b0/0x620 [ 3384.071238] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3384.071991] ? find_held_lock+0x2c/0x110 [ 3384.072667] ? avc_has_extended_perms+0x675/0xf40 [ 3384.073492] ? lock_downgrade+0x6d0/0x6d0 [ 3384.074175] __ext4_ioctl+0x8ad/0x4220 [ 3384.074820] ? ext4_reset_inode_seed+0x450/0x450 [ 3384.075592] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3384.076437] ? find_held_lock+0x2c/0x110 [ 3384.077109] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3384.077979] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3384.078825] ? do_vfs_ioctl+0x283/0x10d0 [ 3384.079488] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3384.080279] ? generic_block_fiemap+0x60/0x60 [ 3384.081021] ? lock_downgrade+0x6d0/0x6d0 [ 3384.081712] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3384.082516] ? wait_for_completion_io+0x270/0x270 [ 3384.083312] ? selinux_file_ioctl+0xb6/0x270 [ 3384.084023] ? __ext4_ioctl+0x4220/0x4220 [ 3384.084709] __x64_sys_ioctl+0x19a/0x210 [ 3384.085373] do_syscall_64+0x33/0x40 [ 3384.085980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3384.086819] RIP: 0033:0x7fcaa5e39b19 [ 3384.087436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3384.090383] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3384.091632] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3384.092322] FAULT_INJECTION: forcing a failure. [ 3384.092322] name failslab, interval 1, probability 0, space 0, times 0 [ 3384.092739] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3384.092749] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3384.092765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3384.098120] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3384.099312] CPU: 1 PID: 16922 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3384.100479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3384.101935] Call Trace: [ 3384.102380] dump_stack+0x107/0x167 [ 3384.103001] should_fail.cold+0x5/0xa [ 3384.103653] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3384.104461] should_failslab+0x5/0x20 [ 3384.105143] kmem_cache_alloc_trace+0x55/0x320 [ 3384.105924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3384.106785] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3384.107557] ? lock_chain_count+0x20/0x20 [ 3384.108240] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3384.109105] ? do_swap+0x134/0x210 [ 3384.109706] ? sort_r+0x239/0x360 [ 3384.110118] blktrace: Concurrent blktraces are not allowed on loop8 [ 3384.110279] ? ext4_file_open+0xa50/0xa50 [ 3384.110298] ext4_getfsmap+0x695/0x990 [ 3384.110318] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3384.113498] ? ext4_fsmap_to_internal+0x260/0x260 [ 3384.114282] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3384.115127] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3384.115999] ext4_ioc_getfsmap+0x2b0/0x620 [ 3384.116731] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3384.117485] ? find_held_lock+0x2c/0x110 [ 3384.118152] ? avc_has_extended_perms+0x675/0xf40 [ 3384.118977] ? lock_downgrade+0x6d0/0x6d0 [ 3384.119650] __ext4_ioctl+0x8ad/0x4220 [ 3384.120316] ? ext4_reset_inode_seed+0x450/0x450 [ 3384.121129] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3384.122014] ? find_held_lock+0x2c/0x110 [ 3384.122708] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3384.123690] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3384.124575] ? do_vfs_ioctl+0x283/0x10d0 [ 3384.125266] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3384.126136] ? generic_block_fiemap+0x60/0x60 [ 3384.126885] ? lock_downgrade+0x6d0/0x6d0 [ 3384.127589] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3384.128372] ? wait_for_completion_io+0x270/0x270 [ 3384.129206] ? selinux_file_ioctl+0xb6/0x270 [ 3384.129946] ? __ext4_ioctl+0x4220/0x4220 [ 3384.130647] __x64_sys_ioctl+0x19a/0x210 [ 3384.131326] do_syscall_64+0x33/0x40 [ 3384.131946] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3384.132829] RIP: 0033:0x7fb4d3c71b19 [ 3384.133445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3384.136556] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3384.137817] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3384.138972] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3384.140103] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3384.141277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3384.142425] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3384.161020] FAULT_INJECTION: forcing a failure. [ 3384.161020] name failslab, interval 1, probability 0, space 0, times 0 [ 3384.162962] CPU: 0 PID: 16915 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3384.164113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3384.165390] Call Trace: [ 3384.165805] dump_stack+0x107/0x167 [ 3384.166377] should_fail.cold+0x5/0xa [ 3384.166962] ? create_object.isra.0+0x3a/0xa30 [ 3384.167651] should_failslab+0x5/0x20 [ 3384.168248] kmem_cache_alloc+0x5b/0x310 [ 3384.168890] create_object.isra.0+0x3a/0xa30 [ 3384.169568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3384.170394] kmem_cache_alloc_trace+0x151/0x320 [ 3384.171099] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3384.171826] ? lock_chain_count+0x20/0x20 [ 3384.172467] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3384.173266] ? do_swap+0x134/0x210 [ 3384.173819] ? sort_r+0x239/0x360 [ 3384.174363] ? ext4_file_open+0xa50/0xa50 [ 3384.175013] ext4_getfsmap+0x695/0x990 [ 3384.175623] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3384.176405] ? ext4_fsmap_to_internal+0x260/0x260 [ 3384.177135] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3384.177946] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3384.178722] ext4_ioc_getfsmap+0x2b0/0x620 [ 3384.179386] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3384.180082] ? find_held_lock+0x2c/0x110 [ 3384.180723] ? avc_has_extended_perms+0x675/0xf40 [ 3384.181488] ? lock_downgrade+0x6d0/0x6d0 [ 3384.182130] __ext4_ioctl+0x8ad/0x4220 [ 3384.182735] ? ext4_reset_inode_seed+0x450/0x450 [ 3384.183485] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3384.184292] ? find_held_lock+0x2c/0x110 [ 3384.184940] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3384.185808] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3384.186602] ? do_vfs_ioctl+0x283/0x10d0 [ 3384.187217] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3384.188014] ? generic_block_fiemap+0x60/0x60 [ 3384.188713] ? lock_downgrade+0x6d0/0x6d0 [ 3384.189361] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3384.190107] ? wait_for_completion_io+0x270/0x270 [ 3384.190860] ? selinux_file_ioctl+0xb6/0x270 [ 3384.191547] ? __ext4_ioctl+0x4220/0x4220 [ 3384.192190] __x64_sys_ioctl+0x19a/0x210 [ 3384.192837] do_syscall_64+0x33/0x40 [ 3384.193395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3384.194193] RIP: 0033:0x7f81caa8db19 [ 3384.194765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3384.197538] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3384.198678] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3384.199738] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3384.200806] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3384.201893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3384.202999] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:44:02 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:02 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfe03, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:44:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:02 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) io_uring_enter(r0, 0x6929, 0x1866, 0x5, &(0x7f00000001c0)={[0x2]}, 0x8) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b400cfae26feb1cabf9c9b2a710c252000", @ANYRES16=0x0, @ANYBLOB="000125bd70ed27dbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030041ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:44:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40106614, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x1b}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:44:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 85) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 93) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3397.059508] blktrace: Concurrent blktraces are not allowed on loop8 [ 3397.100188] FAULT_INJECTION: forcing a failure. [ 3397.100188] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.102727] CPU: 0 PID: 16946 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3397.104208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3397.105978] Call Trace: [ 3397.106543] dump_stack+0x107/0x167 [ 3397.107317] should_fail.cold+0x5/0xa [ 3397.108120] ? create_object.isra.0+0x3a/0xa30 [ 3397.109103] should_failslab+0x5/0x20 [ 3397.109916] kmem_cache_alloc+0x5b/0x310 [ 3397.110778] create_object.isra.0+0x3a/0xa30 [ 3397.111705] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3397.112789] kmem_cache_alloc_trace+0x151/0x320 [ 3397.113943] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3397.114983] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.116048] ? find_held_lock+0x2c/0x110 [ 3397.116931] ? clockevents_program_event+0x14b/0x360 [ 3397.118024] ? do_swap+0x134/0x210 [ 3397.118784] ? sort_r+0x239/0x360 [ 3397.119525] ? ext4_file_open+0xa50/0xa50 [ 3397.120409] ext4_getfsmap+0x695/0x990 [ 3397.121245] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.122321] ? ext4_fsmap_to_internal+0x260/0x260 [ 3397.123341] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3397.124455] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.125558] ext4_ioc_getfsmap+0x2b0/0x620 [ 3397.126450] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3397.127414] ? find_held_lock+0x2c/0x110 [ 3397.128272] ? avc_has_extended_perms+0x675/0xf40 [ 3397.129336] ? lock_downgrade+0x6d0/0x6d0 [ 3397.130228] __ext4_ioctl+0x8ad/0x4220 [ 3397.131054] ? ext4_reset_inode_seed+0x450/0x450 [ 3397.132058] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3397.133172] ? find_held_lock+0x2c/0x110 [ 3397.134052] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3397.135267] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3397.136342] ? do_vfs_ioctl+0x283/0x10d0 [ 3397.137201] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3397.138311] ? generic_block_fiemap+0x60/0x60 [ 3397.139264] ? lock_downgrade+0x6d0/0x6d0 [ 3397.140136] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3397.141167] ? wait_for_completion_io+0x270/0x270 [ 3397.142195] ? selinux_file_ioctl+0xb6/0x270 [ 3397.143132] ? __ext4_ioctl+0x4220/0x4220 [ 3397.144013] __x64_sys_ioctl+0x19a/0x210 [ 3397.144888] do_syscall_64+0x33/0x40 [ 3397.145674] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3397.146764] RIP: 0033:0x7fcaa5e39b19 [ 3397.147546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3397.151405] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3397.152997] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3397.153448] FAULT_INJECTION: forcing a failure. [ 3397.153448] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.154451] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3397.154464] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3397.154474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3397.154485] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3397.163003] FAULT_INJECTION: forcing a failure. [ 3397.163003] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.164445] CPU: 1 PID: 16961 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3397.164458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3397.164467] Call Trace: [ 3397.164499] dump_stack+0x107/0x167 [ 3397.164523] should_fail.cold+0x5/0xa [ 3397.164556] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3397.173958] should_failslab+0x5/0x20 [ 3397.174865] kmem_cache_alloc_trace+0x55/0x320 [ 3397.175931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3397.177145] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3397.178259] ? lock_chain_count+0x20/0x20 [ 3397.179234] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.180461] ? do_swap+0x134/0x210 [ 3397.181304] ? sort_r+0x239/0x360 [ 3397.182122] ? ext4_file_open+0xa50/0xa50 [ 3397.183109] ext4_getfsmap+0x695/0x990 [ 3397.184031] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.185239] ? ext4_fsmap_to_internal+0x260/0x260 [ 3397.186372] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3397.187595] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.188829] ext4_ioc_getfsmap+0x2b0/0x620 [ 3397.189818] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3397.190875] ? find_held_lock+0x2c/0x110 [ 3397.191835] ? avc_has_extended_perms+0x675/0xf40 [ 3397.193008] ? lock_downgrade+0x6d0/0x6d0 [ 3397.193970] __ext4_ioctl+0x8ad/0x4220 [ 3397.194887] ? ext4_reset_inode_seed+0x450/0x450 [ 3397.195983] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3397.197213] ? find_held_lock+0x2c/0x110 [ 3397.198170] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3397.199502] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3397.200719] ? do_vfs_ioctl+0x283/0x10d0 [ 3397.201686] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3397.202895] ? generic_block_fiemap+0x60/0x60 [ 3397.203933] ? lock_downgrade+0x6d0/0x6d0 [ 3397.204911] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3397.206024] ? wait_for_completion_io+0x270/0x270 [ 3397.207137] ? selinux_file_ioctl+0xb6/0x270 [ 3397.208157] ? __ext4_ioctl+0x4220/0x4220 [ 3397.209145] __x64_sys_ioctl+0x19a/0x210 [ 3397.210091] do_syscall_64+0x33/0x40 [ 3397.210947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3397.212142] RIP: 0033:0x7f81caa8db19 [ 3397.213005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3397.217205] RSP: 002b:00007f81c7fe2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3397.218956] RAX: ffffffffffffffda RBX: 00007f81caba1020 RCX: 00007f81caa8db19 [ 3397.220600] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3397.222249] RBP: 00007f81c7fe21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3397.223865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3397.225497] R13: 00007ffd1c60b59f R14: 00007f81c7fe2300 R15: 0000000000022000 [ 3397.227167] CPU: 0 PID: 16951 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3397.228644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3397.230406] Call Trace: [ 3397.230974] dump_stack+0x107/0x167 [ 3397.231850] should_fail.cold+0x5/0xa [ 3397.232706] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3397.233721] should_failslab+0x5/0x20 [ 3397.234527] kmem_cache_alloc_trace+0x55/0x320 [ 3397.235491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3397.236588] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3397.237595] ? lock_chain_count+0x20/0x20 [ 3397.238472] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.239561] ? do_swap+0x134/0x210 [ 3397.240318] ? sort_r+0x239/0x360 [ 3397.241054] ? ext4_file_open+0xa50/0xa50 [ 3397.241931] ext4_getfsmap+0x695/0x990 [ 3397.242753] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.243831] ? ext4_fsmap_to_internal+0x260/0x260 [ 3397.244854] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3397.245977] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.247075] ext4_ioc_getfsmap+0x2b0/0x620 [ 3397.247964] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3397.248947] ? find_held_lock+0x2c/0x110 [ 3397.249809] ? avc_has_extended_perms+0x675/0xf40 [ 3397.250878] ? lock_downgrade+0x6d0/0x6d0 [ 3397.251756] __ext4_ioctl+0x8ad/0x4220 [ 3397.252584] ? ext4_reset_inode_seed+0x450/0x450 [ 3397.253598] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3397.254696] ? find_held_lock+0x2c/0x110 [ 3397.255574] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3397.256792] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3397.257886] ? do_vfs_ioctl+0x283/0x10d0 [ 3397.258758] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3397.259871] ? generic_block_fiemap+0x60/0x60 [ 3397.260830] ? lock_downgrade+0x6d0/0x6d0 [ 3397.261717] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3397.262743] ? wait_for_completion_io+0x270/0x270 [ 3397.263763] ? selinux_file_ioctl+0xb6/0x270 [ 3397.264704] ? __ext4_ioctl+0x4220/0x4220 [ 3397.265587] __x64_sys_ioctl+0x19a/0x210 [ 3397.266453] do_syscall_64+0x33/0x40 [ 3397.267236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3397.268331] RIP: 0033:0x7fb4d3c71b19 [ 3397.269122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3397.273018] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3397.274636] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3397.276150] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3397.277652] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3397.277750] blktrace: Concurrent blktraces are not allowed on loop8 [ 3397.279148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3397.279160] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:44:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x401c5820, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:02 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 95) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x1c}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:44:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:02 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x114, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:44:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 86) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3397.448186] FAULT_INJECTION: forcing a failure. [ 3397.448186] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.450643] CPU: 0 PID: 16977 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3397.452041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3397.453734] Call Trace: [ 3397.454273] dump_stack+0x107/0x167 [ 3397.455011] should_fail.cold+0x5/0xa [ 3397.455780] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3397.456761] should_failslab+0x5/0x20 [ 3397.457530] kmem_cache_alloc_trace+0x55/0x320 [ 3397.458454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3397.459496] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3397.460452] ? lock_chain_count+0x20/0x20 [ 3397.461297] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.462337] ? do_swap+0x134/0x210 [ 3397.463061] ? sort_r+0x239/0x360 [ 3397.463772] ? ext4_file_open+0xa50/0xa50 [ 3397.464613] ext4_getfsmap+0x695/0x990 [ 3397.465406] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.466443] ? ext4_fsmap_to_internal+0x260/0x260 [ 3397.467417] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3397.468486] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.469545] ext4_ioc_getfsmap+0x2b0/0x620 [ 3397.470400] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3397.471337] ? find_held_lock+0x2c/0x110 [ 3397.472167] ? avc_has_extended_perms+0x675/0xf40 [ 3397.473190] ? lock_downgrade+0x6d0/0x6d0 [ 3397.474041] __ext4_ioctl+0x8ad/0x4220 [ 3397.474840] ? ext4_reset_inode_seed+0x450/0x450 [ 3397.475799] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3397.476871] ? find_held_lock+0x2c/0x110 [ 3397.477713] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3397.478875] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3397.479911] ? do_vfs_ioctl+0x283/0x10d0 [ 3397.480731] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3397.481783] ? generic_block_fiemap+0x60/0x60 [ 3397.482688] ? lock_downgrade+0x6d0/0x6d0 [ 3397.483544] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3397.484523] ? wait_for_completion_io+0x270/0x270 [ 3397.485521] ? selinux_file_ioctl+0xb6/0x270 [ 3397.486418] ? __ext4_ioctl+0x4220/0x4220 [ 3397.487265] __x64_sys_ioctl+0x19a/0x210 [ 3397.488086] do_syscall_64+0x33/0x40 [ 3397.488846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3397.488869] FAULT_INJECTION: forcing a failure. [ 3397.488869] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.492106] RIP: 0033:0x7f81caa8db19 [ 3397.492860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3397.496551] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3397.498117] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3397.499552] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3397.500986] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3397.502415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3397.503845] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 [ 3397.505327] CPU: 1 PID: 16981 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3397.506958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3397.508827] Call Trace: [ 3397.509428] dump_stack+0x107/0x167 [ 3397.510239] should_fail.cold+0x5/0xa 19:44:02 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) [ 3397.511102] ? ext4_getfsmap_datadev+0x719/0x25c0 19:44:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x4020940d, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3397.512379] should_failslab+0x5/0x20 [ 3397.513407] kmem_cache_alloc_trace+0x55/0x320 [ 3397.514445] ? ext4_get_group_desc+0x2a0/0x560 [ 3397.515470] ext4_getfsmap_datadev+0x719/0x25c0 [ 3397.516544] ? lock_chain_count+0x20/0x20 [ 3397.517486] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.518639] ? do_swap+0x134/0x210 [ 3397.519443] ? sort_r+0x239/0x360 [ 3397.520223] ? ext4_file_open+0xa50/0xa50 [ 3397.521166] ext4_getfsmap+0x695/0x990 [ 3397.522054] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.523198] ? ext4_fsmap_to_internal+0x260/0x260 [ 3397.524292] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3397.525489] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.526658] ext4_ioc_getfsmap+0x2b0/0x620 [ 3397.527608] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3397.528658] ? find_held_lock+0x2c/0x110 [ 3397.529597] ? avc_has_extended_perms+0x675/0xf40 [ 3397.530726] ? lock_downgrade+0x6d0/0x6d0 [ 3397.531666] __ext4_ioctl+0x8ad/0x4220 [ 3397.532548] ? ext4_reset_inode_seed+0x450/0x450 [ 3397.533620] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3397.534800] ? find_held_lock+0x2c/0x110 [ 3397.535723] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3397.537031] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3397.538197] ? do_vfs_ioctl+0x283/0x10d0 [ 3397.539105] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3397.540273] ? generic_block_fiemap+0x60/0x60 [ 3397.541277] ? lock_downgrade+0x6d0/0x6d0 [ 3397.542207] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3397.543280] ? wait_for_completion_io+0x270/0x270 [ 3397.544374] ? selinux_file_ioctl+0xb6/0x270 [ 3397.545372] ? __ext4_ioctl+0x4220/0x4220 [ 3397.546307] __x64_sys_ioctl+0x19a/0x210 [ 3397.547227] do_syscall_64+0x33/0x40 [ 3397.548065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3397.549212] RIP: 0033:0x7fb4d3c71b19 [ 3397.550046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3397.554153] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3397.555859] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3397.557463] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3397.559075] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3397.560684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3397.562283] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3397.573853] FAULT_INJECTION: forcing a failure. [ 3397.573853] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.576466] CPU: 1 PID: 16983 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3397.578016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3397.579851] Call Trace: [ 3397.580438] dump_stack+0x107/0x167 [ 3397.581273] should_fail.cold+0x5/0xa [ 3397.582118] ? create_object.isra.0+0x3a/0xa30 [ 3397.583146] should_failslab+0x5/0x20 [ 3397.583990] kmem_cache_alloc+0x5b/0x310 [ 3397.584917] create_object.isra.0+0x3a/0xa30 [ 3397.585897] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3397.587037] kmem_cache_alloc_trace+0x151/0x320 [ 3397.588095] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3397.589166] ? lock_chain_count+0x20/0x20 [ 3397.590093] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.591260] ? do_swap+0x134/0x210 [ 3397.592050] ? sort_r+0x239/0x360 [ 3397.592830] ? ext4_file_open+0xa50/0xa50 [ 3397.593767] ext4_getfsmap+0x695/0x990 [ 3397.594641] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.595778] ? ext4_fsmap_to_internal+0x260/0x260 [ 3397.596858] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3397.598041] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.599197] ext4_ioc_getfsmap+0x2b0/0x620 [ 3397.600149] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3397.601181] ? find_held_lock+0x2c/0x110 [ 3397.602115] ? avc_has_extended_perms+0x675/0xf40 [ 3397.603232] ? lock_downgrade+0x6d0/0x6d0 [ 3397.604182] __ext4_ioctl+0x8ad/0x4220 [ 3397.605071] ? ext4_reset_inode_seed+0x450/0x450 [ 3397.606144] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3397.607348] ? find_held_lock+0x2c/0x110 [ 3397.608304] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3397.609612] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3397.610766] ? do_vfs_ioctl+0x283/0x10d0 [ 3397.611710] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3397.612933] ? generic_block_fiemap+0x60/0x60 [ 3397.613972] ? lock_downgrade+0x6d0/0x6d0 [ 3397.614914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3397.616050] ? wait_for_completion_io+0x270/0x270 [ 3397.617146] ? selinux_file_ioctl+0xb6/0x270 [ 3397.618174] ? __ext4_ioctl+0x4220/0x4220 [ 3397.619139] __x64_sys_ioctl+0x19a/0x210 [ 3397.620089] do_syscall_64+0x33/0x40 [ 3397.620937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3397.622140] RIP: 0033:0x7fcaa5e39b19 [ 3397.623004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3397.627275] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3397.629048] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3397.630705] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3397.632293] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3397.633881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3397.635463] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:44:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 96) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:03 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 87) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:03 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x1d}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:44:03 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x122, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3397.707169] FAULT_INJECTION: forcing a failure. [ 3397.707169] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.709899] CPU: 1 PID: 17000 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3397.711498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3397.713418] Call Trace: [ 3397.714015] dump_stack+0x107/0x167 [ 3397.714825] should_fail.cold+0x5/0xa [ 3397.715713] ? create_object.isra.0+0x3a/0xa30 [ 3397.716777] should_failslab+0x5/0x20 [ 3397.717666] kmem_cache_alloc+0x5b/0x310 [ 3397.718617] ? lock_downgrade+0x6d0/0x6d0 [ 3397.719580] create_object.isra.0+0x3a/0xa30 [ 3397.720585] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3397.721780] kmem_cache_alloc_trace+0x151/0x320 [ 3397.722869] ext4_getfsmap_datadev+0x719/0x25c0 [ 3397.723944] ? lock_chain_count+0x20/0x20 [ 3397.724918] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.726107] ? do_swap+0x134/0x210 [ 3397.726943] ? sort_r+0x239/0x360 [ 3397.727748] ? ext4_file_open+0xa50/0xa50 [ 3397.728721] ext4_getfsmap+0x695/0x990 [ 3397.729627] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.730803] ? ext4_fsmap_to_internal+0x260/0x260 [ 3397.731918] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3397.733128] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.734299] ext4_ioc_getfsmap+0x2b0/0x620 [ 3397.735263] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3397.736298] ? find_held_lock+0x2c/0x110 [ 3397.737222] ? avc_has_extended_perms+0x675/0xf40 [ 3397.738349] ? lock_downgrade+0x6d0/0x6d0 [ 3397.739290] __ext4_ioctl+0x8ad/0x4220 [ 3397.740189] ? ext4_reset_inode_seed+0x450/0x450 [ 3397.741276] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3397.742459] ? find_held_lock+0x2c/0x110 [ 3397.743390] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3397.744690] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3397.745848] ? do_vfs_ioctl+0x283/0x10d0 [ 3397.746757] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3397.747956] ? generic_block_fiemap+0x60/0x60 [ 3397.748978] ? lock_downgrade+0x6d0/0x6d0 [ 3397.749921] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3397.751025] ? wait_for_completion_io+0x270/0x270 [ 3397.752120] ? selinux_file_ioctl+0xb6/0x270 [ 3397.753111] ? __ext4_ioctl+0x4220/0x4220 [ 3397.754052] __x64_sys_ioctl+0x19a/0x210 [ 3397.754964] do_syscall_64+0x33/0x40 [ 3397.755815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3397.756965] RIP: 0033:0x7fb4d3c71b19 [ 3397.757809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3397.761973] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3397.763695] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3397.765301] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3397.766914] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3397.768497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3397.770096] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3397.790884] FAULT_INJECTION: forcing a failure. 19:44:03 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) [ 3397.790884] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.793861] CPU: 1 PID: 16999 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3397.795426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3397.797307] Call Trace: [ 3397.797910] dump_stack+0x107/0x167 [ 3397.798727] should_fail.cold+0x5/0xa [ 3397.799590] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3397.800690] should_failslab+0x5/0x20 [ 3397.801555] kmem_cache_alloc_trace+0x55/0x320 [ 3397.802577] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3397.803723] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3397.804805] ? lock_chain_count+0x20/0x20 [ 3397.805749] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.806912] ? do_swap+0x134/0x210 [ 3397.807720] ? sort_r+0x239/0x360 [ 3397.808512] ? ext4_file_open+0xa50/0xa50 [ 3397.809462] ext4_getfsmap+0x695/0x990 [ 3397.810344] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.811502] ? ext4_fsmap_to_internal+0x260/0x260 [ 3397.812591] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3397.813789] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3397.814954] ext4_ioc_getfsmap+0x2b0/0x620 [ 3397.815910] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3397.816942] ? find_held_lock+0x2c/0x110 [ 3397.817866] ? avc_has_extended_perms+0x675/0xf40 [ 3397.818998] ? lock_downgrade+0x6d0/0x6d0 [ 3397.819948] __ext4_ioctl+0x8ad/0x4220 [ 3397.820851] ? ext4_reset_inode_seed+0x450/0x450 [ 3397.821928] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3397.823100] ? find_held_lock+0x2c/0x110 [ 3397.824046] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3397.825348] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3397.826505] ? do_vfs_ioctl+0x283/0x10d0 [ 3397.827436] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3397.828623] ? generic_block_fiemap+0x60/0x60 [ 3397.829646] ? lock_downgrade+0x6d0/0x6d0 [ 3397.830592] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3397.831694] ? wait_for_completion_io+0x270/0x270 [ 3397.832781] ? selinux_file_ioctl+0xb6/0x270 [ 3397.833783] ? __ext4_ioctl+0x4220/0x4220 [ 3397.834716] __x64_sys_ioctl+0x19a/0x210 [ 3397.835635] do_syscall_64+0x33/0x40 [ 3397.836470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3397.837612] RIP: 0033:0x7f81caa8db19 [ 3397.838458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3397.842653] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3397.844384] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3397.846024] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3397.847641] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3397.849261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3397.850873] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:44:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3397.907577] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 19:44:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 95) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 97) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40305828, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:17 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x1e}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:44:17 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1bb, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:44:17 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:17 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:17 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xf, "8a7e3c59a411b6"}) [ 3412.170828] FAULT_INJECTION: forcing a failure. [ 3412.170828] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.172375] CPU: 0 PID: 17028 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3412.173291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.174380] Call Trace: [ 3412.174729] dump_stack+0x107/0x167 [ 3412.175205] should_fail.cold+0x5/0xa [ 3412.175724] ? create_object.isra.0+0x3a/0xa30 [ 3412.176339] should_failslab+0x5/0x20 [ 3412.176863] kmem_cache_alloc+0x5b/0x310 [ 3412.177413] create_object.isra.0+0x3a/0xa30 [ 3412.178008] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3412.178701] kmem_cache_alloc_trace+0x151/0x320 [ 3412.179335] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3412.179982] ? lock_chain_count+0x20/0x20 [ 3412.180544] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.181246] ? do_swap+0x134/0x210 [ 3412.181728] ? sort_r+0x239/0x360 [ 3412.182196] ? ext4_file_open+0xa50/0xa50 [ 3412.182755] ext4_getfsmap+0x695/0x990 [ 3412.183283] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.183969] ? ext4_fsmap_to_internal+0x260/0x260 [ 3412.184619] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3412.185342] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.186040] ext4_ioc_getfsmap+0x2b0/0x620 [ 3412.186610] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3412.187222] ? find_held_lock+0x2c/0x110 [ 3412.187774] ? avc_has_extended_perms+0x675/0xf40 [ 3412.188444] ? lock_downgrade+0x6d0/0x6d0 [ 3412.189012] __ext4_ioctl+0x8ad/0x4220 [ 3412.189544] ? ext4_reset_inode_seed+0x450/0x450 [ 3412.190185] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3412.190891] ? find_held_lock+0x2c/0x110 [ 3412.191446] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3412.192227] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3412.192943] ? do_vfs_ioctl+0x283/0x10d0 [ 3412.193492] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3412.194204] ? generic_block_fiemap+0x60/0x60 [ 3412.194810] ? lock_downgrade+0x6d0/0x6d0 [ 3412.195375] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3412.196030] ? wait_for_completion_io+0x270/0x270 [ 3412.196681] ? selinux_file_ioctl+0xb6/0x270 [ 3412.197276] ? __ext4_ioctl+0x4220/0x4220 [ 3412.197836] __x64_sys_ioctl+0x19a/0x210 [ 3412.198385] do_syscall_64+0x33/0x40 [ 3412.198887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.199577] RIP: 0033:0x7f81caa8db19 [ 3412.200078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.202483] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3412.203461] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3412.204379] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3412.205375] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3412.206294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3412.207216] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:44:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 98) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3412.234149] FAULT_INJECTION: forcing a failure. [ 3412.234149] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.235681] CPU: 0 PID: 17038 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3412.236572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.237655] Call Trace: [ 3412.238006] dump_stack+0x107/0x167 [ 3412.238476] should_fail.cold+0x5/0xa [ 3412.238964] ? create_object.isra.0+0x3a/0xa30 [ 3412.239564] should_failslab+0x5/0x20 [ 3412.240054] kmem_cache_alloc+0x5b/0x310 [ 3412.240576] create_object.isra.0+0x3a/0xa30 [ 3412.241152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3412.241812] kmem_cache_alloc_trace+0x151/0x320 [ 3412.242411] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3412.243042] ? lock_chain_count+0x20/0x20 [ 3412.243577] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.244232] ? do_swap+0x134/0x210 [ 3412.244695] ? sort_r+0x239/0x360 [ 3412.245153] ? ext4_file_open+0xa50/0xa50 [ 3412.245702] ext4_getfsmap+0x695/0x990 [ 3412.246205] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.246271] FAULT_INJECTION: forcing a failure. [ 3412.246271] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.246866] ? ext4_fsmap_to_internal+0x260/0x260 [ 3412.246879] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3412.246909] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.251265] ext4_ioc_getfsmap+0x2b0/0x620 [ 3412.251815] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3412.252401] ? find_held_lock+0x2c/0x110 [ 3412.252942] ? avc_has_extended_perms+0x675/0xf40 [ 3412.253573] ? lock_downgrade+0x6d0/0x6d0 [ 3412.254109] __ext4_ioctl+0x8ad/0x4220 [ 3412.254616] ? ext4_reset_inode_seed+0x450/0x450 [ 3412.255231] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3412.255901] ? find_held_lock+0x2c/0x110 [ 3412.256439] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3412.257184] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3412.257841] ? do_vfs_ioctl+0x283/0x10d0 [ 3412.258354] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3412.259016] ? generic_block_fiemap+0x60/0x60 [ 3412.259582] ? lock_downgrade+0x6d0/0x6d0 [ 3412.260106] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3412.260720] ? wait_for_completion_io+0x270/0x270 [ 3412.261350] ? selinux_file_ioctl+0xb6/0x270 [ 3412.261911] ? __ext4_ioctl+0x4220/0x4220 [ 3412.262437] __x64_sys_ioctl+0x19a/0x210 [ 3412.262968] do_syscall_64+0x33/0x40 [ 3412.263442] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.264102] RIP: 0033:0x7fcaa5e39b19 [ 3412.264575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.266949] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3412.267934] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3412.268863] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3412.269779] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3412.270692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3412.271602] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3412.272526] CPU: 1 PID: 17032 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3412.274077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.275910] Call Trace: [ 3412.276488] dump_stack+0x107/0x167 [ 3412.277303] should_fail.cold+0x5/0xa [ 3412.278141] ? ext4_getfsmap_datadev+0x89d/0x25c0 [ 3412.279194] should_failslab+0x5/0x20 [ 3412.280036] kmem_cache_alloc_trace+0x55/0x320 [ 3412.281040] ? ext4_bg_num_gdb+0x172/0x250 [ 3412.281972] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3412.283018] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.284127] ? __lock_acquire+0xbb1/0x5b00 [ 3412.285063] ? mark_lock+0xf5/0x2df0 [ 3412.285880] ? do_swap+0x134/0x210 [ 3412.286660] ? sort_r+0x239/0x360 [ 3412.287420] ? ext4_file_open+0xa50/0xa50 [ 3412.287701] FAULT_INJECTION: forcing a failure. [ 3412.287701] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.288331] ext4_getfsmap+0x695/0x990 [ 3412.288352] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.292767] ? ext4_fsmap_to_internal+0x260/0x260 [ 3412.293838] ? mark_lock+0xf5/0x2df0 [ 3412.294658] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3412.295826] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.296979] ext4_ioc_getfsmap+0x2b0/0x620 [ 3412.297912] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3412.298920] ? find_held_lock+0x2c/0x110 [ 3412.299827] ? avc_has_extended_perms+0x675/0xf40 [ 3412.300944] ? lock_downgrade+0x6d0/0x6d0 [ 3412.301866] __ext4_ioctl+0x8ad/0x4220 [ 3412.302739] ? ext4_reset_inode_seed+0x450/0x450 [ 3412.303790] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3412.304964] ? find_held_lock+0x2c/0x110 [ 3412.305886] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3412.307170] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3412.308325] ? do_vfs_ioctl+0x283/0x10d0 [ 3412.309218] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3412.310371] ? generic_block_fiemap+0x60/0x60 [ 3412.311373] ? lock_downgrade+0x6d0/0x6d0 [ 3412.312299] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3412.313385] ? wait_for_completion_io+0x270/0x270 [ 3412.314470] ? selinux_file_ioctl+0xb6/0x270 [ 3412.315470] ? __ext4_ioctl+0x4220/0x4220 [ 3412.316407] __x64_sys_ioctl+0x19a/0x210 [ 3412.317420] do_syscall_64+0x33/0x40 [ 3412.318475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.319797] RIP: 0033:0x7fb4d3c71b19 [ 3412.320634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.324779] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3412.326526] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3412.328081] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3412.329715] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3412.331345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3412.333022] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 [ 3412.334630] CPU: 0 PID: 17043 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3412.336106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.337856] Call Trace: [ 3412.338419] dump_stack+0x107/0x167 [ 3412.339181] should_fail.cold+0x5/0xa [ 3412.339991] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3412.341020] should_failslab+0x5/0x20 [ 3412.341832] kmem_cache_alloc_trace+0x55/0x320 [ 3412.342788] ? ext4_bg_num_gdb+0x172/0x250 [ 3412.343676] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3412.344663] ? lock_chain_count+0x20/0x20 [ 3412.345535] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.346603] ? do_swap+0x134/0x210 [ 3412.347350] ? sort_r+0x239/0x360 [ 3412.348081] ? ext4_file_open+0xa50/0xa50 [ 3412.348971] ext4_getfsmap+0x695/0x990 [ 3412.349792] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.350860] ? ext4_fsmap_to_internal+0x260/0x260 [ 3412.351864] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3412.352982] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.354066] ext4_ioc_getfsmap+0x2b0/0x620 [ 3412.354956] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3412.355908] ? find_held_lock+0x2c/0x110 [ 3412.356769] ? avc_has_extended_perms+0x675/0xf40 [ 3412.357824] ? lock_downgrade+0x6d0/0x6d0 [ 3412.358714] __ext4_ioctl+0x8ad/0x4220 [ 3412.359543] ? ext4_reset_inode_seed+0x450/0x450 [ 3412.360534] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3412.361637] ? find_held_lock+0x2c/0x110 [ 3412.362509] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3412.363717] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3412.364811] ? do_vfs_ioctl+0x283/0x10d0 [ 3412.365661] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3412.366760] ? generic_block_fiemap+0x60/0x60 [ 3412.367702] ? lock_downgrade+0x6d0/0x6d0 [ 3412.368569] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3412.369586] ? wait_for_completion_io+0x270/0x270 [ 3412.370601] ? selinux_file_ioctl+0xb6/0x270 [ 3412.371523] ? __ext4_ioctl+0x4220/0x4220 [ 3412.372405] __x64_sys_ioctl+0x19a/0x210 [ 3412.373267] do_syscall_64+0x33/0x40 [ 3412.374050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.375128] RIP: 0033:0x7f81caa8db19 [ 3412.375912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.379785] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3412.381403] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3412.382895] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3412.384388] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3412.385894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3412.387392] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:44:17 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) [ 3412.426726] blktrace: Concurrent blktraces are not allowed on loop8 19:44:17 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 96) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40305829, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:17 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000001c0)) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:44:17 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x21}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:44:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 99) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:17 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xb91, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3412.568635] blktrace: Concurrent blktraces are not allowed on loop8 [ 3412.568986] FAULT_INJECTION: forcing a failure. [ 3412.568986] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.572625] CPU: 1 PID: 17054 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3412.574099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.575843] Call Trace: [ 3412.576402] dump_stack+0x107/0x167 [ 3412.577176] should_fail.cold+0x5/0xa [ 3412.577989] ? ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3412.578997] should_failslab+0x5/0x20 [ 3412.579798] kmem_cache_alloc_trace+0x55/0x320 [ 3412.580761] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3412.581842] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3412.582829] ? lock_chain_count+0x20/0x20 [ 3412.583702] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.584785] ? do_swap+0x134/0x210 [ 3412.585547] ? sort_r+0x239/0x360 [ 3412.586272] ? ext4_file_open+0xa50/0xa50 [ 3412.587184] ext4_getfsmap+0x695/0x990 [ 3412.588000] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.589080] ? ext4_fsmap_to_internal+0x260/0x260 [ 3412.590098] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3412.591214] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.592300] ext4_ioc_getfsmap+0x2b0/0x620 [ 3412.593193] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3412.594161] ? find_held_lock+0x2c/0x110 [ 3412.595024] ? avc_has_extended_perms+0x675/0xf40 [ 3412.596079] ? lock_downgrade+0x6d0/0x6d0 [ 3412.596975] __ext4_ioctl+0x8ad/0x4220 [ 3412.597800] ? ext4_reset_inode_seed+0x450/0x450 [ 3412.598794] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3412.599902] ? find_held_lock+0x2c/0x110 [ 3412.600772] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3412.601990] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3412.603088] ? do_vfs_ioctl+0x283/0x10d0 [ 3412.603949] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3412.605066] ? generic_block_fiemap+0x60/0x60 [ 3412.606007] ? lock_downgrade+0x6d0/0x6d0 [ 3412.606885] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3412.607899] ? wait_for_completion_io+0x270/0x270 [ 3412.608931] ? selinux_file_ioctl+0xb6/0x270 [ 3412.609856] ? __ext4_ioctl+0x4220/0x4220 [ 3412.610731] __x64_sys_ioctl+0x19a/0x210 [ 3412.611590] do_syscall_64+0x33/0x40 [ 3412.612383] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.613477] RIP: 0033:0x7fcaa5e39b19 [ 3412.614291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.618215] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3412.619822] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3412.621346] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3412.622840] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3412.624352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3412.625867] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:44:17 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) [ 3412.697964] blktrace: Concurrent blktraces are not allowed on loop8 [ 3412.797218] FAULT_INJECTION: forcing a failure. [ 3412.797218] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.800079] CPU: 1 PID: 17075 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3412.801535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.803282] Call Trace: [ 3412.803846] dump_stack+0x107/0x167 [ 3412.804615] should_fail.cold+0x5/0xa [ 3412.805424] ? create_object.isra.0+0x3a/0xa30 [ 3412.806377] should_failslab+0x5/0x20 [ 3412.807177] kmem_cache_alloc+0x5b/0x310 [ 3412.808038] ? lock_downgrade+0x6d0/0x6d0 [ 3412.808929] create_object.isra.0+0x3a/0xa30 [ 3412.809851] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3412.810924] kmem_cache_alloc_trace+0x151/0x320 [ 3412.811902] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3412.812902] ? lock_chain_count+0x20/0x20 [ 3412.813777] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.814856] ? do_swap+0x134/0x210 [ 3412.815601] ? sort_r+0x239/0x360 [ 3412.816335] ? ext4_file_open+0xa50/0xa50 [ 3412.817214] ext4_getfsmap+0x695/0x990 [ 3412.818049] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.819118] ? ext4_fsmap_to_internal+0x260/0x260 [ 3412.820128] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3412.821245] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3412.822333] ext4_ioc_getfsmap+0x2b0/0x620 [ 3412.823225] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3412.824184] ? find_held_lock+0x2c/0x110 [ 3412.825056] ? avc_has_extended_perms+0x675/0xf40 [ 3412.826102] ? lock_downgrade+0x6d0/0x6d0 [ 3412.826971] __ext4_ioctl+0x8ad/0x4220 [ 3412.827798] ? ext4_reset_inode_seed+0x450/0x450 [ 3412.828810] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3412.829910] ? find_held_lock+0x2c/0x110 [ 3412.830777] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3412.831980] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3412.833063] ? do_vfs_ioctl+0x283/0x10d0 [ 3412.833919] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3412.835020] ? generic_block_fiemap+0x60/0x60 [ 3412.835968] ? lock_downgrade+0x6d0/0x6d0 [ 3412.836842] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3412.837862] ? wait_for_completion_io+0x270/0x270 [ 3412.838878] ? selinux_file_ioctl+0xb6/0x270 [ 3412.839802] ? __ext4_ioctl+0x4220/0x4220 [ 3412.840681] __x64_sys_ioctl+0x19a/0x210 [ 3412.841601] do_syscall_64+0x33/0x40 [ 3412.842384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.843451] RIP: 0033:0x7f81caa8db19 [ 3412.844233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.848149] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3412.849762] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3412.851255] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3412.852746] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3412.854251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3412.855748] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:44:32 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 89) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:32 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x22}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:44:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 100) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x4030582a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:32 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x4]}, 0x8) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r3, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5acf1f0d81304512fd9400000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000200000000000000508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r3, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:44:32 executing program 4: setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 97) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:32 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x910b, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) [ 3427.523915] FAULT_INJECTION: forcing a failure. [ 3427.523915] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.526503] CPU: 1 PID: 17096 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3427.527970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3427.529729] Call Trace: [ 3427.530285] dump_stack+0x107/0x167 [ 3427.531057] should_fail.cold+0x5/0xa [ 3427.531865] ? create_object.isra.0+0x3a/0xa30 [ 3427.532826] should_failslab+0x5/0x20 [ 3427.533645] kmem_cache_alloc+0x5b/0x310 [ 3427.534504] create_object.isra.0+0x3a/0xa30 [ 3427.535430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3427.536512] kmem_cache_alloc_trace+0x151/0x320 [ 3427.537479] ext4_getfsmap_datadev+0xd9f/0x25c0 [ 3427.538480] ? lock_chain_count+0x20/0x20 [ 3427.539333] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.540416] ? do_swap+0x134/0x210 [ 3427.541165] ? sort_r+0x239/0x360 [ 3427.541888] ? ext4_file_open+0xa50/0xa50 [ 3427.542748] ext4_getfsmap+0x695/0x990 [ 3427.543550] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.544598] ? ext4_fsmap_to_internal+0x260/0x260 [ 3427.545967] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3427.547414] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.548822] ext4_ioc_getfsmap+0x2b0/0x620 [ 3427.549896] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3427.550956] ? find_held_lock+0x2c/0x110 [ 3427.551913] ? avc_has_extended_perms+0x675/0xf40 [ 3427.553092] ? lock_downgrade+0x6d0/0x6d0 [ 3427.554073] __ext4_ioctl+0x8ad/0x4220 [ 3427.555002] ? ext4_reset_inode_seed+0x450/0x450 [ 3427.556143] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3427.557423] ? find_held_lock+0x2c/0x110 [ 3427.558392] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3427.559745] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3427.560977] ? do_vfs_ioctl+0x283/0x10d0 [ 3427.561962] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3427.563226] ? generic_block_fiemap+0x60/0x60 [ 3427.564303] ? lock_downgrade+0x6d0/0x6d0 [ 3427.565330] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3427.566523] ? wait_for_completion_io+0x270/0x270 [ 3427.567761] ? selinux_file_ioctl+0xb6/0x270 [ 3427.568917] ? __ext4_ioctl+0x4220/0x4220 [ 3427.569975] __x64_sys_ioctl+0x19a/0x210 [ 3427.570965] do_syscall_64+0x33/0x40 [ 3427.571880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3427.573142] RIP: 0033:0x7fcaa5e39b19 [ 3427.574048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.578674] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3427.580577] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3427.582373] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3427.584106] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3427.585719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3427.587211] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3427.600083] FAULT_INJECTION: forcing a failure. [ 3427.600083] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.601497] CPU: 0 PID: 17104 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3427.602334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3427.603344] Call Trace: [ 3427.603673] dump_stack+0x107/0x167 [ 3427.604116] should_fail.cold+0x5/0xa [ 3427.604590] ? create_object.isra.0+0x3a/0xa30 [ 3427.605148] should_failslab+0x5/0x20 [ 3427.605609] kmem_cache_alloc+0x5b/0x310 [ 3427.606102] create_object.isra.0+0x3a/0xa30 [ 3427.606636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3427.607251] kmem_cache_alloc_trace+0x151/0x320 [ 3427.607815] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3427.608388] ? lock_chain_count+0x20/0x20 [ 3427.608900] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.609537] ? do_swap+0x134/0x210 [ 3427.609967] ? sort_r+0x239/0x360 [ 3427.610384] ? ext4_file_open+0xa50/0xa50 [ 3427.610888] ext4_getfsmap+0x695/0x990 [ 3427.611354] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.611963] ? ext4_fsmap_to_internal+0x260/0x260 [ 3427.612541] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3427.613183] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.613813] ext4_ioc_getfsmap+0x2b0/0x620 [ 3427.614322] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3427.614865] ? find_held_lock+0x2c/0x110 [ 3427.615359] ? avc_has_extended_perms+0x675/0xf40 [ 3427.615957] ? lock_downgrade+0x6d0/0x6d0 [ 3427.616463] __ext4_ioctl+0x8ad/0x4220 [ 3427.616933] ? ext4_reset_inode_seed+0x450/0x450 [ 3427.617518] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3427.618149] ? find_held_lock+0x2c/0x110 [ 3427.618646] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3427.619342] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3427.619963] ? do_vfs_ioctl+0x283/0x10d0 [ 3427.620451] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3427.621089] ? generic_block_fiemap+0x60/0x60 [ 3427.621626] ? lock_downgrade+0x6d0/0x6d0 [ 3427.622122] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3427.622700] ? wait_for_completion_io+0x270/0x270 [ 3427.623286] ? selinux_file_ioctl+0xb6/0x270 [ 3427.623814] ? __ext4_ioctl+0x4220/0x4220 [ 3427.624311] __x64_sys_ioctl+0x19a/0x210 [ 3427.624801] do_syscall_64+0x33/0x40 [ 3427.625260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3427.625877] RIP: 0033:0x7fb4d3c71b19 [ 3427.626327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.628543] RSP: 002b:00007fb4d11c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3427.629461] RAX: ffffffffffffffda RBX: 00007fb4d3d85020 RCX: 00007fb4d3c71b19 [ 3427.630312] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3427.631161] RBP: 00007fb4d11c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3427.632011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3427.632863] R13: 00007ffc6b75877f R14: 00007fb4d11c6300 R15: 0000000000022000 19:44:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x4030582b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:33 executing program 4: setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) [ 3427.639538] FAULT_INJECTION: forcing a failure. [ 3427.639538] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.641036] CPU: 0 PID: 17098 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 3427.641877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3427.642882] Call Trace: [ 3427.643199] dump_stack+0x107/0x167 [ 3427.643640] should_fail.cold+0x5/0xa [ 3427.644097] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3427.644683] should_failslab+0x5/0x20 [ 3427.645152] kmem_cache_alloc_trace+0x55/0x320 [ 3427.645697] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3427.646317] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3427.646882] ? lock_chain_count+0x20/0x20 [ 3427.647382] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.647995] ? do_swap+0x134/0x210 [ 3427.648426] ? sort_r+0x239/0x360 [ 3427.648848] ? ext4_file_open+0xa50/0xa50 [ 3427.649356] ext4_getfsmap+0x695/0x990 [ 3427.649824] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.650437] ? ext4_fsmap_to_internal+0x260/0x260 [ 3427.651019] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3427.651660] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.652283] ext4_ioc_getfsmap+0x2b0/0x620 [ 3427.652793] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3427.653347] ? find_held_lock+0x2c/0x110 [ 3427.653838] ? avc_has_extended_perms+0x675/0xf40 [ 3427.654438] ? lock_downgrade+0x6d0/0x6d0 [ 3427.654939] __ext4_ioctl+0x8ad/0x4220 [ 3427.655410] ? ext4_reset_inode_seed+0x450/0x450 [ 3427.655978] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3427.656610] ? find_held_lock+0x2c/0x110 [ 3427.657112] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3427.657807] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3427.658425] ? do_vfs_ioctl+0x283/0x10d0 [ 3427.658915] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3427.659546] ? generic_block_fiemap+0x60/0x60 [ 3427.660083] ? lock_downgrade+0x6d0/0x6d0 [ 3427.660580] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3427.661179] ? wait_for_completion_io+0x270/0x270 [ 3427.661762] ? selinux_file_ioctl+0xb6/0x270 [ 3427.662291] ? __ext4_ioctl+0x4220/0x4220 [ 3427.662790] __x64_sys_ioctl+0x19a/0x210 [ 3427.663279] do_syscall_64+0x33/0x40 [ 3427.663728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3427.664339] RIP: 0033:0x7f81caa8db19 [ 3427.664784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.666992] RSP: 002b:00007f81c8003188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3427.667900] RAX: ffffffffffffffda RBX: 00007f81caba0f60 RCX: 00007f81caa8db19 [ 3427.668753] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3427.669608] RBP: 00007f81c80031d0 R08: 0000000000000000 R09: 0000000000000000 [ 3427.670457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3427.671311] R13: 00007ffd1c60b59f R14: 00007f81c8003300 R15: 0000000000022000 19:44:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:33 executing program 4: setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3427.824754] FAULT_INJECTION: forcing a failure. [ 3427.824754] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.827421] CPU: 1 PID: 17115 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3427.828876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3427.830627] Call Trace: [ 3427.831186] dump_stack+0x107/0x167 [ 3427.831950] should_fail.cold+0x5/0xa [ 3427.832750] ? ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3427.833784] should_failslab+0x5/0x20 [ 3427.834580] kmem_cache_alloc_trace+0x55/0x320 [ 3427.835526] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3427.836588] ext4_getfsmap_datadev+0x11b3/0x25c0 [ 3427.837620] ? lock_chain_count+0x20/0x20 [ 3427.838554] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.839827] ? do_swap+0x134/0x210 [ 3427.840603] ? sort_r+0x239/0x360 [ 3427.841340] ? ext4_file_open+0xa50/0xa50 [ 3427.842216] ext4_getfsmap+0x695/0x990 [ 3427.843025] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.844093] ? ext4_fsmap_to_internal+0x260/0x260 [ 3427.845111] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3427.846226] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.847299] ext4_ioc_getfsmap+0x2b0/0x620 [ 3427.848180] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3427.849135] ? find_held_lock+0x2c/0x110 [ 3427.849992] ? avc_has_extended_perms+0x675/0xf40 [ 3427.851031] ? lock_downgrade+0x6d0/0x6d0 [ 3427.851899] __ext4_ioctl+0x8ad/0x4220 [ 3427.852723] ? ext4_reset_inode_seed+0x450/0x450 [ 3427.853724] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3427.854820] ? find_held_lock+0x2c/0x110 [ 3427.855679] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3427.856877] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3427.857962] ? do_vfs_ioctl+0x283/0x10d0 [ 3427.858808] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3427.859897] ? generic_block_fiemap+0x60/0x60 [ 3427.860832] ? lock_downgrade+0x6d0/0x6d0 [ 3427.861711] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3427.862716] ? wait_for_completion_io+0x270/0x270 [ 3427.863728] ? selinux_file_ioctl+0xb6/0x270 [ 3427.864652] ? __ext4_ioctl+0x4220/0x4220 [ 3427.865529] __x64_sys_ioctl+0x19a/0x210 [ 3427.866384] do_syscall_64+0x33/0x40 [ 3427.867182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3427.868251] RIP: 0033:0x7fb4d3c71b19 [ 3427.869034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.872870] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3427.874475] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3427.875958] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3427.877451] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3427.878932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3427.880419] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:44:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 98) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3427.902167] FAULT_INJECTION: forcing a failure. [ 3427.902167] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.903467] CPU: 0 PID: 17120 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3427.904244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3427.905157] Call Trace: [ 3427.905452] dump_stack+0x107/0x167 [ 3427.905848] should_fail.cold+0x5/0xa [ 3427.906270] ? ext4_getfsmap_datadev+0xaae/0x25c0 [ 3427.906791] should_failslab+0x5/0x20 [ 3427.907208] kmem_cache_alloc_trace+0x55/0x320 [ 3427.907702] ? ext4_bg_num_gdb+0x172/0x250 [ 3427.908161] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3427.908674] ? lock_chain_count+0x20/0x20 [ 3427.909136] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.909704] ? do_swap+0x134/0x210 [ 3427.910101] ? sort_r+0x239/0x360 [ 3427.910486] ? ext4_file_open+0xa50/0xa50 [ 3427.910940] ext4_getfsmap+0x695/0x990 [ 3427.911373] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.911937] ? ext4_fsmap_to_internal+0x260/0x260 [ 3427.912468] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3427.913059] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3427.913629] ext4_ioc_getfsmap+0x2b0/0x620 [ 3427.914085] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3427.914592] ? find_held_lock+0x2c/0x110 [ 3427.915042] ? avc_has_extended_perms+0x675/0xf40 [ 3427.915586] ? lock_downgrade+0x6d0/0x6d0 [ 3427.916035] __ext4_ioctl+0x8ad/0x4220 [ 3427.916470] ? ext4_reset_inode_seed+0x450/0x450 [ 3427.916987] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3427.917551] ? find_held_lock+0x2c/0x110 [ 3427.917996] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3427.918613] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3427.919170] ? do_vfs_ioctl+0x283/0x10d0 [ 3427.919609] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3427.920177] ? generic_block_fiemap+0x60/0x60 [ 3427.920662] ? lock_downgrade+0x6d0/0x6d0 [ 3427.921119] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3427.921643] ? wait_for_completion_io+0x270/0x270 [ 3427.922172] ? selinux_file_ioctl+0xb6/0x270 [ 3427.922647] ? __ext4_ioctl+0x4220/0x4220 [ 3427.923105] __x64_sys_ioctl+0x19a/0x210 [ 3427.923546] do_syscall_64+0x33/0x40 [ 3427.923953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3427.924508] RIP: 0033:0x7fcaa5e39b19 [ 3427.924911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.926907] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3427.927736] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3427.928579] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3427.929539] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3427.930303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3427.931073] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:44:33 executing program 4: mknod$loop(0x0, 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x40806685, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 99) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3428.039874] FAULT_INJECTION: forcing a failure. [ 3428.039874] name failslab, interval 1, probability 0, space 0, times 0 [ 3428.041283] CPU: 0 PID: 17135 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3428.042151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3428.043187] Call Trace: [ 3428.043540] dump_stack+0x107/0x167 [ 3428.044008] should_fail.cold+0x5/0xa [ 3428.044458] ? create_object.isra.0+0x3a/0xa30 [ 3428.044963] should_failslab+0x5/0x20 [ 3428.045610] kmem_cache_alloc+0x5b/0x310 [ 3428.046060] ? lock_downgrade+0x6d0/0x6d0 [ 3428.046520] create_object.isra.0+0x3a/0xa30 [ 3428.047003] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3428.047554] kmem_cache_alloc_trace+0x151/0x320 [ 3428.048066] ext4_getfsmap_datadev+0xaae/0x25c0 [ 3428.048579] ? lock_chain_count+0x20/0x20 [ 3428.049041] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3428.049604] ? do_swap+0x134/0x210 [ 3428.049993] ? sort_r+0x239/0x360 [ 3428.050369] ? ext4_file_open+0xa50/0xa50 [ 3428.050826] ext4_getfsmap+0x695/0x990 [ 3428.051246] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3428.051791] ? ext4_fsmap_to_internal+0x260/0x260 [ 3428.052310] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3428.052878] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3428.053450] ext4_ioc_getfsmap+0x2b0/0x620 [ 3428.053905] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3428.054400] ? find_held_lock+0x2c/0x110 [ 3428.054842] ? avc_has_extended_perms+0x675/0xf40 [ 3428.055377] ? lock_downgrade+0x6d0/0x6d0 [ 3428.055826] __ext4_ioctl+0x8ad/0x4220 [ 3428.056258] ? ext4_reset_inode_seed+0x450/0x450 [ 3428.056765] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3428.057344] ? find_held_lock+0x2c/0x110 [ 3428.057789] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3428.058418] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3428.058976] ? do_vfs_ioctl+0x283/0x10d0 [ 3428.059415] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3428.059977] ? generic_block_fiemap+0x60/0x60 [ 3428.060470] ? lock_downgrade+0x6d0/0x6d0 [ 3428.060917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3428.061451] ? wait_for_completion_io+0x270/0x270 [ 3428.061973] ? selinux_file_ioctl+0xb6/0x270 [ 3428.062456] ? __ext4_ioctl+0x4220/0x4220 [ 3428.062911] __x64_sys_ioctl+0x19a/0x210 [ 3428.063364] do_syscall_64+0x33/0x40 [ 3428.063765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3428.064327] RIP: 0033:0x7fcaa5e39b19 [ 3428.064729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3428.066756] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3428.067579] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3428.068361] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3428.069153] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3428.069930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3428.070714] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 19:44:46 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x23}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 19:44:46 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x162210, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:44:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 91) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) (fail_nth: 100) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x16ba}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:46 executing program 4: mknod$loop(0x0, 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:46 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) fcntl$getown(r1, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) chmod(&(0x7f0000000580)='./file1\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250900000007000a00074471006c00508008000700010000000800030001ac0f00040006000800030001ac0f000800030001ac0f00110001005b0d375d7fbda2de71d8cae2ca000000050002000500000004000500120004004407d98c36f73d3550165d1fdde700000f000400febf400248ffdc8131c09c00040028000800370000000000080011fb31b966762b006c4d22cf8cbd319a74090001ac0f0009000700c79fb0"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44094) openat(r2, 0x0, 0x18000, 0x80) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000510c0)={0x100000000, [], 0xf, "8a7e3c59a411b6"}) 19:44:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x6609, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x80086601, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3441.126592] FAULT_INJECTION: forcing a failure. [ 3441.126592] name failslab, interval 1, probability 0, space 0, times 0 [ 3441.128123] FAULT_INJECTION: forcing a failure. [ 3441.128123] name failslab, interval 1, probability 0, space 0, times 0 [ 3441.128146] CPU: 1 PID: 17149 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 3441.128158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3441.128164] Call Trace: [ 3441.128191] dump_stack+0x107/0x167 [ 3441.128220] should_fail.cold+0x5/0xa [ 3441.128245] ? ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3441.128265] should_failslab+0x5/0x20 [ 3441.128286] kmem_cache_alloc_trace+0x55/0x320 [ 3441.128305] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3441.128330] ext4_getfsmap_datadev+0xc0c/0x25c0 [ 3441.128367] ? lock_chain_count+0x20/0x20 [ 3441.141823] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3441.143021] ? do_swap+0x134/0x210 [ 3441.143855] ? sort_r+0x239/0x360 [ 3441.144663] ? ext4_file_open+0xa50/0xa50 [ 3441.145644] ext4_getfsmap+0x695/0x990 [ 3441.146562] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3441.147747] ? ext4_fsmap_to_internal+0x260/0x260 [ 3441.148884] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3441.150101] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3441.151308] ext4_ioc_getfsmap+0x2b0/0x620 [ 3441.152276] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3441.153326] ? find_held_lock+0x2c/0x110 [ 3441.154270] ? avc_has_extended_perms+0x675/0xf40 [ 3441.155411] ? lock_downgrade+0x6d0/0x6d0 [ 3441.156355] __ext4_ioctl+0x8ad/0x4220 [ 3441.157274] ? ext4_reset_inode_seed+0x450/0x450 [ 3441.158349] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3441.159549] ? find_held_lock+0x2c/0x110 [ 3441.160494] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3441.161827] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3441.163011] ? do_vfs_ioctl+0x283/0x10d0 [ 3441.163947] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3441.165172] ? generic_block_fiemap+0x60/0x60 [ 3441.166200] ? lock_downgrade+0x6d0/0x6d0 [ 3441.167146] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3441.168255] ? wait_for_completion_io+0x270/0x270 [ 3441.169375] ? selinux_file_ioctl+0xb6/0x270 [ 3441.170380] ? __ext4_ioctl+0x4220/0x4220 [ 3441.171352] __x64_sys_ioctl+0x19a/0x210 [ 3441.172281] do_syscall_64+0x33/0x40 [ 3441.173147] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3441.174326] RIP: 0033:0x7fcaa5e39b19 [ 3441.175174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3441.179355] RSP: 002b:00007fcaa33af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3441.181077] RAX: ffffffffffffffda RBX: 00007fcaa5f4cf60 RCX: 00007fcaa5e39b19 [ 3441.182707] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3441.184312] RBP: 00007fcaa33af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3441.185936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3441.187552] R13: 00007fff7bb2951f R14: 00007fcaa33af300 R15: 0000000000022000 [ 3441.189197] CPU: 0 PID: 17161 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 3441.190137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3441.191249] Call Trace: [ 3441.191613] dump_stack+0x107/0x167 [ 3441.192100] should_fail.cold+0x5/0xa [ 3441.192609] ? create_object.isra.0+0x3a/0xa30 [ 3441.193379] should_failslab+0x5/0x20 [ 3441.193880] kmem_cache_alloc+0x5b/0x310 [ 3441.194428] create_object.isra.0+0x3a/0xa30 [ 3441.195012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3441.195691] kmem_cache_alloc_trace+0x151/0x320 [ 3441.196313] ext4_getfsmap_datadev+0x89d/0x25c0 [ 3441.196944] ? lock_chain_count+0x20/0x20 [ 3441.197510] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3441.198173] ? do_swap+0x134/0x210 [ 3441.198633] ? sort_r+0x239/0x360 [ 3441.199096] ? ext4_file_open+0xa50/0xa50 [ 3441.199649] ext4_getfsmap+0x695/0x990 [ 3441.200158] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3441.200811] ? ext4_fsmap_to_internal+0x260/0x260 [ 3441.201446] ? ext4_ioctl_check_immutable+0x200/0x200 [ 3441.202134] ? ext4_getfsmap_meta_helper+0x6e0/0x6e0 [ 3441.202799] ext4_ioc_getfsmap+0x2b0/0x620 [ 3441.203353] ? ext4_ioctl_setflags+0xbe0/0xbe0 [ 3441.203946] ? find_held_lock+0x2c/0x110 [ 3441.204491] ? avc_has_extended_perms+0x675/0xf40 [ 3441.205158] ? lock_downgrade+0x6d0/0x6d0 [ 3441.205700] __ext4_ioctl+0x8ad/0x4220 [ 3441.206213] ? ext4_reset_inode_seed+0x450/0x450 [ 3441.206834] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3441.207503] ? find_held_lock+0x2c/0x110 [ 3441.208033] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 3441.208774] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3441.209457] ? do_vfs_ioctl+0x283/0x10d0 [ 3441.209992] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3441.210680] ? generic_block_fiemap+0x60/0x60 [ 3441.211248] ? lock_downgrade+0x6d0/0x6d0 [ 3441.211778] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3441.212401] ? wait_for_completion_io+0x270/0x270 [ 3441.213025] ? selinux_file_ioctl+0xb6/0x270 [ 3441.213606] ? __ext4_ioctl+0x4220/0x4220 [ 3441.214137] __x64_sys_ioctl+0x19a/0x210 [ 3441.214669] do_syscall_64+0x33/0x40 [ 3441.215154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3441.215825] RIP: 0033:0x7fb4d3c71b19 [ 3441.216313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3441.218664] RSP: 002b:00007fb4d11e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3441.219648] RAX: ffffffffffffffda RBX: 00007fb4d3d84f60 RCX: 00007fb4d3c71b19 [ 3441.220580] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 3441.221499] RBP: 00007fb4d11e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3441.222420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3441.223330] R13: 00007ffc6b75877f R14: 00007fb4d11e7300 R15: 0000000000022000 19:44:46 executing program 4: mknod$loop(0x0, 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:46 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x4b47, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x80086603, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:46 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 19:44:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="050000e0caa36b63c88038688c92b224"]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r4 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81, {}, 0x6}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x4b49, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) 19:44:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x10, 0x2, 0x6}}, 0x14) r3 = dup(r2) dup(r1) io_uring_enter(r1, 0x774, 0xec5a, 0x1, &(0x7f0000000280)={[0x9f7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x5, 0x53, 0x3, 0x81, 0x0, 0xfff, 0x844c2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x79, 0x10001}, 0x80, 0x8, 0x7f, 0x7, 0x1, 0x400, 0x4, 0x0, 0x20, 0x0, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x9, 0x81}, 0x409f) ioctl$FS_IOC_GETFSMAP(r1, 0x80087601, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) [ 3442.652542] syz-executor.7 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3442.653754] CPU: 0 PID: 14866 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 3442.654540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.655490] Call Trace: [ 3442.655798] dump_stack+0x107/0x167 [ 3442.656215] dump_header+0x107/0x689 [ 3442.656638] oom_kill_process.cold+0x10/0x15 [ 3442.657158] out_of_memory+0x1149/0x1440 [ 3442.657624] ? oom_killer_disable+0x280/0x280 [ 3442.658141] ? mutex_trylock+0x237/0x2b0 [ 3442.658601] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3442.659273] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3442.659943] ? lock_acquire+0xd7/0x470 [ 3442.660385] ? warn_alloc+0x190/0x190 [ 3442.660835] __alloc_pages_nodemask+0x51d/0x600 [ 3442.661368] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3442.662049] ? find_get_entry+0x2c8/0x740 [ 3442.662524] alloc_pages_current+0x187/0x280 [ 3442.663026] __page_cache_alloc+0x2d2/0x360 [ 3442.663518] pagecache_get_page+0x2c7/0xc80 [ 3442.664002] filemap_fault+0x177d/0x2210 [ 3442.664470] ? read_cache_page_gfp+0x30/0x30 [ 3442.664966] ? replace_page_cache_page+0x1200/0x1200 [ 3442.665551] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3442.666151] ext4_filemap_fault+0x87/0xc0 [ 3442.666626] __do_fault+0x113/0x410 [ 3442.667057] handle_mm_fault+0x1e53/0x3500 [ 3442.667542] ? __pmd_alloc+0x630/0x630 [ 3442.667992] ? vmacache_find+0x55/0x2a0 [ 3442.668460] do_user_addr_fault+0x56e/0xc60 [ 3442.668967] exc_page_fault+0xa2/0x1a0 [ 3442.669428] ? asm_exc_page_fault+0x8/0x30 [ 3442.669917] asm_exc_page_fault+0x1e/0x30 [ 3442.670389] RIP: 0033:0x7fd0cec61688 [ 3442.670826] Code: Unable to access opcode bytes at RIP 0x7fd0cec6165e. [ 3442.671570] RSP: 002b:00007fff4a377310 EFLAGS: 00010202 [ 3442.672188] RAX: 0000001b2cd20000 RBX: 000000000000007a RCX: 0000000000348550 [ 3442.673007] RDX: 0000000000348689 RSI: 00007fff4a3773d0 RDI: 0000000000000001 [ 3442.673841] RBP: 00007fff4a37736c R08: 0000000000000d72 R09: 00007fff4a3a0080 [ 3442.674662] R10: 00007fff4a3a0090 R11: 000000000062a4ca R12: 0000000000000032 [ 3442.675481] R13: 00000000003484af R14: 0000000000000013 R15: 00007fff4a3773d0 [ 3442.677124] Mem-Info: [ 3442.677531] active_anon:14819 inactive_anon:45201 isolated_anon:0 [ 3442.677531] active_file:26 inactive_file:11 isolated_file:0 [ 3442.677531] unevictable:0 dirty:8 writeback:0 [ 3442.677531] slab_reclaimable:6689 slab_unreclaimable:60195 [ 3442.677531] mapped:69640 shmem:116 pagetables:990 bounce:0 [ 3442.677531] free:2792 free_pcp:0 free_cma:0 [ 3442.681113] Node 0 active_anon:59276kB inactive_anon:180804kB active_file:104kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278560kB dirty:32kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4064kB all_unreclaimable? yes [ 3442.683798] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3442.686798] lowmem_reserve[]: 0 1616 1616 1616 [ 3442.687369] Node 0 DMA32 free:4660kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:59024kB inactive_anon:180804kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:32kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3960kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3442.690637] lowmem_reserve[]: 0 0 0 0 [ 3442.691101] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3442.692715] Node 0 DMA32: 470*4kB (UME) 228*8kB (M) 55*16kB (M) 23*32kB (UM) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5576kB [ 3442.694429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3442.695441] 173 total pagecache pages [ 3442.695885] 0 pages in swap cache [ 3442.696312] Swap cache stats: add 0, delete 0, find 0/0 [ 3442.696937] Free swap = 0kB [ 3442.697316] Total swap = 0kB [ 3442.697680] 524158 pages RAM [ 3442.698031] 0 pages HighMem/MovableOnly [ 3442.698511] 105069 pages reserved [ 3442.698927] Unreclaimable slab info: [ 3442.699377] Name Used Total [ 3442.700024] pid_2 52KB 52KB [ 3442.700674] IEEE-802.15.4-RAW 31KB 31KB [ 3442.701325] fib6_nodes 28KB 28KB [ 3442.701956] ip6_dst_cache 41KB 41KB [ 3442.702596] PINGv6 30KB 30KB [ 3442.703244] RAWv6 154KB 154KB [ 3442.703872] UDPv6 62KB 62KB [ 3442.704521] TCPv6 62KB 62KB [ 3442.705161] scsi_sense_cache 8KB 8KB [ 3442.705799] sd_ext_cdb 3KB 3KB [ 3442.706449] virtio_scsi_cmd 16KB 16KB [ 3442.707083] sgpool-128 119KB 119KB [ 3442.707732] sgpool-64 63KB 63KB [ 3442.708373] sgpool-32 189KB 189KB [ 3442.709003] sgpool-16 75KB 75KB [ 3442.709652] sgpool-8 41KB 60KB [ 3442.710307] io_kiocb 45KB 45KB [ 3442.710928] mqueue_inode_cache 62KB 62KB [ 3442.711586] nfs_commit_data 15KB 15KB [ 3442.712220] nfs_write_data 47KB 47KB [ 3442.712848] jbd2_inode 11KB 11KB [ 3442.713490] ext4_system_zone 3KB 3KB [ 3442.714118] ext4_io_end_vec 7KB 7KB [ 3442.714753] ext4_bio_post_read_ctx 15KB 15KB [ 3442.715448] dnotify_mark 3KB 3KB [ 3442.716064] dnotify_struct 3KB 3KB [ 3442.716711] bio-2 4KB 4KB [ 3442.717361] pid_namespace 7KB 7KB [ 3442.717985] posix_timers_cache 7KB 7KB [ 3442.718631] rpc_buffers 31KB 31KB [ 3442.719272] rpc_tasks 3KB 3KB [ 3442.719892] UNIX 390KB 448KB [ 3442.720537] tcp_bind_bucket 4KB 4KB [ 3442.721162] ip_fib_trie 8KB 8KB [ 3442.721813] ip_fib_alias 15KB 15KB [ 3442.722450] ip_dst_cache 8KB 8KB [ 3442.723073] PING 62KB 62KB [ 3442.723707] RAW 61KB 61KB [ 3442.724351] UDP 196KB 315KB [ 3442.724968] request_sock_TCP 7KB 7KB [ 3442.725621] TCP 60KB 60KB [ 3442.726254] hugetlbfs_inode_cache 30KB 30KB [ 3442.726916] bio-1 11KB 11KB [ 3442.727565] eventpoll_pwq 23KB 23KB [ 3442.728181] eventpoll_epi 43KB 43KB [ 3442.728824] inotify_inode_mark 117KB 117KB [ 3442.729533] request_queue 60KB 60KB [ 3442.730276] blkdev_ioc 22KB 22KB [ 3442.730987] bio-0 96KB 96KB [ 3442.731736] biovec-max 862KB 862KB [ 3442.732413] biovec-64 173KB 252KB [ 3442.733037] biovec-16 86KB 86KB [ 3442.733692] uid_cache 8KB 8KB [ 3442.734338] dmaengine-unmap-2 4KB 4KB [ 3442.734958] audit_buffer 7KB 7KB [ 3442.735606] skbuff_fclone_cache 105KB 105KB [ 3442.736274] skbuff_head_cache 1476KB 1560KB [ 3442.736891] file_lock_cache 51KB 51KB [ 3442.737553] file_lock_ctx 7KB 7KB [ 3442.738176] fsnotify_mark_connector 40KB 40KB [ 3442.738878] net_namespace 86KB 86KB [ 3442.739527] task_delay_info 131KB 131KB [ 3442.740153] taskstats 100KB 100KB [ 3442.740858] proc_dir_entry 307KB 307KB [ 3442.741501] pde_opener 47KB 47KB [ 3442.742095] seq_file 75KB 75KB [ 3442.742712] sigqueue 129KB 129KB [ 3442.743320] shmem_inode_cache 1250KB 1289KB [ 3442.743930] kernfs_iattrs_cache 239KB 239KB [ 3442.744567] kernfs_node_cache 5153KB 5153KB [ 3442.745187] mnt_cache 149KB 149KB [ 3442.745816] filp 2293KB 2460KB [ 3442.746444] names_cache 17918KB 18385KB [ 3442.747048] hashtab_node 274KB 274KB [ 3442.747665] ebitmap_node 1149KB 1149KB [ 3442.748289] avtab_node 4976KB 4976KB [ 3442.748898] avc_node 31KB 31KB [ 3442.749537] lsm_inode_cache 2674KB 2933KB [ 3442.750145] lsm_file_cache 163KB 188KB [ 3442.750771] key_jar 39KB 39KB [ 3442.751403] uts_namespace 15KB 15KB [ 3442.752009] nsproxy 7KB 7KB [ 3442.752644] vm_area_struct 918KB 1032KB [ 3442.753269] fs_cache 60KB 68KB [ 3442.753875] files_cache 244KB 318KB [ 3442.754491] signal_cache 383KB 494KB [ 3442.755105] sighand_cache 270KB 330KB [ 3442.755727] task_struct 1253KB 1391KB [ 3442.756352] cred_jar 147KB 160KB [ 3442.756952] anon_vma_chain 263KB 263KB [ 3442.757587] anon_vma 211KB 211KB [ 3442.758187] pid 96KB 101KB [ 3442.758820] Acpi-Operand 203KB 233KB [ 3442.759445] Acpi-ParseExt 23KB 23KB [ 3442.760062] Acpi-Parse 173KB 189KB [ 3442.760687] Acpi-State 141KB 157KB [ 3442.761319] Acpi-Namespace 24KB 24KB [ 3442.761919] numa_policy 3KB 3KB [ 3442.762539] trace_event_file 176KB 176KB [ 3442.763146] ftrace_event_field 280KB 280KB [ 3442.763777] pool_workqueue 32KB 32KB [ 3442.764409] task_group 16KB 16KB [ 3442.765014] mm_struct 337KB 409KB [ 3442.765641] vmap_area 102KB 102KB [ 3442.766262] page->ptl 204KB 204KB [ 3442.766864] kmemleak_scan_area 143KB 143KB [ 3442.767891] kmemleak_object 135056KB 143438KB [ 3442.768521] kmalloc-8k 4608KB 4608KB [ 3442.769135] kmalloc-4k 7368KB 7552KB [ 3442.769762] kmalloc-2k 3800KB 4128KB [ 3442.770395] kmalloc-1k 2262KB 3168KB [ 3442.771022] kmalloc-512 6322KB 7712KB [ 3442.771647] kmalloc-256 1163KB 1240KB [ 3442.772285] kmalloc-192 354KB 536KB [ 3442.772898] kmalloc-128 420KB 504KB [ 3442.773545] kmalloc-96 613KB 752KB [ 3442.774169] kmalloc-64 1418KB 1652KB [ 3442.774799] kmalloc-32 731KB 844KB [ 3442.775423] kmalloc-16 364KB 364KB [ 3442.776031] kmalloc-8 290KB 326KB [ 3442.776660] kmem_cache_node 43KB 43KB [ 3442.777299] kmem_cache 75KB 75KB [ 3442.777897] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=14866,uid=0 [ 3442.779522] Out of memory (oom_kill_allocating_task): Killed process 14866 (syz-executor.7) total-vm:93280kB, anon-rss:376kB, file-rss:34752kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 3442.950729] syz-executor.6 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3442.952201] CPU: 1 PID: 14869 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 3442.953201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.954351] Call Trace: [ 3442.954717] dump_stack+0x107/0x167 [ 3442.955224] dump_header+0x107/0x689 [ 3442.955753] oom_kill_process.cold+0x10/0x15 [ 3442.956364] out_of_memory+0x1149/0x1440 [ 3442.956930] ? oom_killer_disable+0x280/0x280 [ 3442.957561] ? mutex_trylock+0x237/0x2b0 [ 3442.958118] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3442.958948] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3442.959759] ? lock_acquire+0xd7/0x470 [ 3442.960301] ? warn_alloc+0x190/0x190 [ 3442.960845] __alloc_pages_nodemask+0x51d/0x600 [ 3442.961494] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3442.962328] ? find_get_entry+0x2c8/0x740 [ 3442.962906] alloc_pages_current+0x187/0x280 [ 3442.963515] __page_cache_alloc+0x2d2/0x360 [ 3442.964114] pagecache_get_page+0x2c7/0xc80 [ 3442.964710] filemap_fault+0x177d/0x2210 [ 3442.965291] ? read_cache_page_gfp+0x30/0x30 [ 3442.965903] ? handle_mm_fault+0x28b1/0x3500 [ 3442.966504] ? lock_downgrade+0x6d0/0x6d0 [ 3442.967080] ext4_filemap_fault+0x87/0xc0 [ 3442.967647] __do_fault+0x113/0x410 [ 3442.968154] handle_mm_fault+0x1e53/0x3500 [ 3442.968746] ? __pmd_alloc+0x630/0x630 [ 3442.969295] ? vmacache_find+0x55/0x2a0 [ 3442.969859] do_user_addr_fault+0x56e/0xc60 [ 3442.970458] exc_page_fault+0xa2/0x1a0 [ 3442.970992] ? asm_exc_page_fault+0x8/0x30 [ 3442.971573] asm_exc_page_fault+0x1e/0x30 [ 3442.972140] RIP: 0033:0x7ff6eba3a688 [ 3442.972653] Code: Unable to access opcode bytes at RIP 0x7ff6eba3a65e. [ 3442.973557] RSP: 002b:00007ffebac318d0 EFLAGS: 00010202 [ 3442.974291] RAX: 0000001b2d020000 RBX: 000000000000006b RCX: 0000000000348550 [ 3442.975265] RDX: 0000000000348694 RSI: 00007ffebac31990 RDI: 0000000000000001 [ 3442.976268] RBP: 00007ffebac3192c R08: 0000000000000d72 R09: 00007ffebad8a080 [ 3442.977280] R10: 00007ffebad8a090 R11: 000000000062a4e0 R12: 0000000000000032 [ 3442.978299] R13: 00000000003484a9 R14: 0000000000000013 R15: 00007ffebac31990 [ 3442.979954] Mem-Info: [ 3442.980418] active_anon:14822 inactive_anon:45193 isolated_anon:0 [ 3442.980418] active_file:12 inactive_file:37 isolated_file:0 [ 3442.980418] unevictable:0 dirty:0 writeback:0 [ 3442.980418] slab_reclaimable:6689 slab_unreclaimable:60203 [ 3442.980418] mapped:69641 shmem:116 pagetables:964 bounce:0 [ 3442.980418] free:2849 free_pcp:64 free_cma:0 [ 3442.984888] Node 0 active_anon:59288kB inactive_anon:180772kB active_file:48kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278564kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4064kB all_unreclaimable? no [ 3442.988219] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3442.991888] lowmem_reserve[]: 0 1616 1616 1616 [ 3442.992556] Node 0 DMA32 free:4888kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:59288kB inactive_anon:180772kB active_file:48kB inactive_file:148kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3856kB bounce:0kB free_pcp:256kB local_pcp:4kB free_cma:0kB [ 3442.996511] lowmem_reserve[]: 0 0 0 0 [ 3442.997070] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3442.999014] Node 0 DMA32: 477*4kB (UME) 229*8kB (M) 55*16kB (M) 19*32kB (M) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5356kB [ 3443.000988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3443.002210] 163 total pagecache pages [ 3443.002743] 0 pages in swap cache [ 3443.003257] Swap cache stats: add 0, delete 0, find 0/0 [ 3443.003994] Free swap = 0kB [ 3443.004429] Total swap = 0kB [ 3443.004876] 524158 pages RAM [ 3443.005329] 0 pages HighMem/MovableOnly [ 3443.005882] 105069 pages reserved [ 3443.006382] Unreclaimable slab info: [ 3443.006908] Name Used Total [ 3443.007693] pid_2 52KB 52KB [ 3443.008459] IEEE-802.15.4-RAW 31KB 31KB [ 3443.009232] fib6_nodes 28KB 28KB [ 3443.009982] ip6_dst_cache 41KB 41KB [ 3443.010751] PINGv6 30KB 30KB [ 3443.011514] RAWv6 154KB 154KB [ 3443.012281] UDPv6 62KB 62KB [ 3443.013037] TCPv6 62KB 62KB [ 3443.013808] scsi_sense_cache 8KB 8KB [ 3443.014569] sd_ext_cdb 3KB 3KB [ 3443.015335] virtio_scsi_cmd 16KB 16KB [ 3443.016084] sgpool-128 119KB 119KB [ 3443.016865] sgpool-64 63KB 63KB [ 3443.017631] sgpool-32 189KB 189KB [ 3443.018399] sgpool-16 75KB 75KB [ 3443.019145] sgpool-8 41KB 60KB [ 3443.019915] io_kiocb 45KB 45KB [ 3443.020682] mqueue_inode_cache 62KB 62KB [ 3443.021476] nfs_commit_data 15KB 15KB [ 3443.022242] nfs_write_data 47KB 47KB [ 3443.022999] jbd2_inode 11KB 11KB [ 3443.023765] ext4_system_zone 3KB 3KB [ 3443.024527] ext4_io_end_vec 7KB 7KB [ 3443.025294] ext4_bio_post_read_ctx 15KB 15KB [ 3443.026110] dnotify_mark 3KB 3KB [ 3443.026878] dnotify_struct 3KB 3KB [ 3443.027646] bio-2 4KB 4KB [ 3443.028416] pid_namespace 7KB 7KB [ 3443.029162] posix_timers_cache 7KB 7KB [ 3443.029930] rpc_buffers 31KB 31KB [ 3443.030699] rpc_tasks 3KB 3KB [ 3443.031481] UNIX 390KB 448KB [ 3443.032248] tcp_bind_bucket 4KB 4KB [ 3443.032998] ip_fib_trie 8KB 8KB [ 3443.033790] ip_fib_alias 15KB 15KB [ 3443.034557] ip_dst_cache 8KB 8KB [ 3443.035330] PING 62KB 62KB [ 3443.036081] RAW 61KB 61KB [ 3443.036855] UDP 196KB 315KB [ 3443.037633] request_sock_TCP 7KB 7KB [ 3443.038401] TCP 60KB 60KB [ 3443.039148] hugetlbfs_inode_cache 30KB 30KB [ 3443.039964] bio-1 11KB 11KB [ 3443.040735] eventpoll_pwq 23KB 23KB [ 3443.041515] eventpoll_epi 43KB 43KB [ 3443.042294] inotify_inode_mark 117KB 117KB [ 3443.043053] request_queue 60KB 60KB [ 3443.043819] blkdev_ioc 22KB 22KB [ 3443.044589] bio-0 96KB 96KB [ 3443.045362] biovec-max 862KB 862KB [ 3443.046112] biovec-64 173KB 252KB [ 3443.046881] biovec-16 86KB 86KB [ 3443.047646] uid_cache 8KB 8KB [ 3443.048427] dmaengine-unmap-2 4KB 4KB [ 3443.049197] audit_buffer 7KB 7KB [ 3443.049971] skbuff_fclone_cache 105KB 105KB [ 3443.050765] skbuff_head_cache 1510KB 1560KB [ 3443.051530] file_lock_cache 51KB 51KB [ 3443.052307] file_lock_ctx 7KB 7KB [ 3443.053054] fsnotify_mark_connector 40KB 40KB [ 3443.053909] net_namespace 86KB 86KB [ 3443.054677] task_delay_info 131KB 131KB [ 3443.055442] taskstats 100KB 100KB [ 3443.056213] proc_dir_entry 307KB 307KB [ 3443.056964] pde_opener 47KB 47KB [ 3443.057738] seq_file 75KB 75KB [ 3443.058508] sigqueue 129KB 129KB [ 3443.059276] shmem_inode_cache 1250KB 1289KB [ 3443.060027] kernfs_iattrs_cache 239KB 239KB [ 3443.060827] kernfs_node_cache 5153KB 5153KB [ 3443.061600] mnt_cache 149KB 149KB [ 3443.062391] filp 2293KB 2460KB [ 3443.063144] names_cache 17918KB 18385KB [ 3443.063910] hashtab_node 274KB 274KB [ 3443.064679] ebitmap_node 1149KB 1149KB [ 3443.065458] avtab_node 4976KB 4976KB [ 3443.066230] avc_node 31KB 31KB [ 3443.066991] lsm_inode_cache 2674KB 2933KB [ 3443.067760] lsm_file_cache 163KB 188KB [ 3443.068529] key_jar 39KB 39KB [ 3443.069305] uts_namespace 15KB 15KB [ 3443.070056] nsproxy 7KB 7KB [ 3443.070830] vm_area_struct 918KB 1032KB [ 3443.071597] fs_cache 60KB 68KB [ 3443.072368] files_cache 244KB 318KB [ 3443.073120] signal_cache 383KB 494KB [ 3443.073900] sighand_cache 270KB 330KB [ 3443.074663] task_struct 1253KB 1391KB [ 3443.075437] cred_jar 147KB 160KB [ 3443.076192] anon_vma_chain 263KB 263KB [ 3443.076957] anon_vma 211KB 211KB [ 3443.077725] pid 96KB 101KB [ 3443.078500] Acpi-Operand 203KB 233KB [ 3443.079264] Acpi-ParseExt 23KB 23KB [ 3443.080017] Acpi-Parse 173KB 189KB [ 3443.080782] Acpi-State 141KB 157KB [ 3443.081566] Acpi-Namespace 24KB 24KB [ 3443.082332] numa_policy 3KB 3KB [ 3443.083085] trace_event_file 176KB 176KB [ 3443.083858] ftrace_event_field 280KB 280KB [ 3443.084640] pool_workqueue 32KB 32KB [ 3443.085424] task_group 16KB 16KB [ 3443.086171] mm_struct 337KB 409KB [ 3443.086945] vmap_area 102KB 102KB [ 3443.087725] page->ptl 204KB 204KB [ 3443.088497] kmemleak_scan_area 143KB 143KB [ 3443.089335] kmemleak_object 135177KB 143438KB [ 3443.090107] kmalloc-8k 4608KB 4608KB [ 3443.090881] kmalloc-4k 7368KB 7552KB [ 3443.091657] kmalloc-2k 3800KB 4128KB [ 3443.092437] kmalloc-1k 2262KB 3168KB [ 3443.093218] kmalloc-512 6415KB 7712KB [ 3443.093972] kmalloc-256 1163KB 1240KB [ 3443.094742] kmalloc-192 354KB 536KB [ 3443.095509] kmalloc-128 420KB 504KB [ 3443.096282] kmalloc-96 613KB 752KB [ 3443.097038] kmalloc-64 1418KB 1652KB [ 3443.097815] kmalloc-32 731KB 844KB [ 3443.098596] kmalloc-16 364KB 364KB [ 3443.099364] kmalloc-8 290KB 326KB [ 3443.100116] kmem_cache_node 43KB 43KB [ 3443.100885] kmem_cache 75KB 75KB [ 3443.101668] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz6,mems_allowed=0,global_oom,task_memcg=/syz6,task=syz-executor.6,pid=14869,uid=0 [ 3443.103713] Out of memory (oom_kill_allocating_task): Killed process 14869 (syz-executor.6) total-vm:93280kB, anon-rss:384kB, file-rss:34680kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 3443.304001] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3443.305210] CPU: 1 PID: 14870 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 3443.305980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3443.306907] Call Trace: [ 3443.307203] dump_stack+0x107/0x167 [ 3443.307609] dump_header+0x107/0x689 [ 3443.308029] oom_kill_process.cold+0x10/0x15 [ 3443.308531] out_of_memory+0x1149/0x1440 [ 3443.308988] ? oom_killer_disable+0x280/0x280 [ 3443.309496] ? mutex_trylock+0x237/0x2b0 [ 3443.309947] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3443.310612] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3443.311279] ? lock_acquire+0xd7/0x470 [ 3443.311716] ? warn_alloc+0x190/0x190 [ 3443.312153] __alloc_pages_nodemask+0x51d/0x600 [ 3443.312679] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3443.313359] ? find_get_entry+0x2c8/0x740 [ 3443.313828] alloc_pages_current+0x187/0x280 [ 3443.314326] __page_cache_alloc+0x2d2/0x360 [ 3443.314815] pagecache_get_page+0x2c7/0xc80 [ 3443.315299] filemap_fault+0x177d/0x2210 [ 3443.315761] ? read_cache_page_gfp+0x30/0x30 [ 3443.316253] ? replace_page_cache_page+0x1200/0x1200 [ 3443.316820] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3443.317415] ext4_filemap_fault+0x87/0xc0 [ 3443.317880] __do_fault+0x113/0x410 [ 3443.318290] handle_mm_fault+0x1e53/0x3500 [ 3443.318770] ? __pmd_alloc+0x630/0x630 [ 3443.319211] ? vmacache_find+0x55/0x2a0 [ 3443.319659] do_user_addr_fault+0x56e/0xc60 [ 3443.320145] exc_page_fault+0xa2/0x1a0 [ 3443.320583] ? asm_exc_page_fault+0x8/0x30 [ 3443.321056] asm_exc_page_fault+0x1e/0x30 [ 3443.321523] RIP: 0033:0x7f68993dc688 [ 3443.321939] Code: Unable to access opcode bytes at RIP 0x7f68993dc65e. [ 3443.322670] RSP: 002b:00007ffc81b6d4f0 EFLAGS: 00010202 [ 3443.323267] RAX: 0000001b2cf20000 RBX: 000000000000007d RCX: 0000000000348550 [ 3443.324063] RDX: 000000000034867a RSI: 00007ffc81b6d5b0 RDI: 0000000000000001 [ 3443.324858] RBP: 00007ffc81b6d54c R08: 0000000000000d72 R09: 00007ffc81ba8080 [ 3443.325672] R10: 00007ffc81ba8090 R11: 000000000062a4ac R12: 0000000000000032 [ 3443.326467] R13: 0000000000348496 R14: 000000000000000f R15: 00007ffc81b6d5b0 [ 3443.327299] Mem-Info: [ 3443.327585] active_anon:14829 inactive_anon:45196 isolated_anon:0 [ 3443.327585] active_file:28 inactive_file:33 isolated_file:0 [ 3443.327585] unevictable:0 dirty:0 writeback:0 [ 3443.327585] slab_reclaimable:6687 slab_unreclaimable:60187 [ 3443.327585] mapped:69634 shmem:116 pagetables:964 bounce:0 [ 3443.327585] free:2845 free_pcp:62 free_cma:0 [ 3443.331070] Node 0 active_anon:59316kB inactive_anon:180784kB active_file:112kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4064kB all_unreclaimable? yes [ 3443.333652] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3443.336551] lowmem_reserve[]: 0 1616 1616 1616 [ 3443.337081] Node 0 DMA32 free:4872kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:59316kB inactive_anon:180784kB active_file:120kB inactive_file:132kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3856kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3443.340283] lowmem_reserve[]: 0 0 0 0 [ 3443.340729] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3443.342451] Node 0 DMA32: 457*4kB (ME) 211*8kB (UM) 47*16kB (UM) 19*32kB (UM) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5132kB [ 3443.344279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3443.345244] 162 total pagecache pages [ 3443.345666] 0 pages in swap cache [ 3443.346051] Swap cache stats: add 0, delete 0, find 0/0 [ 3443.346655] Free swap = 0kB [ 3443.346990] Total swap = 0kB [ 3443.347339] 524158 pages RAM [ 3443.347674] 0 pages HighMem/MovableOnly [ 3443.348113] 105069 pages reserved [ 3443.348519] Unreclaimable slab info: [ 3443.348929] Name Used Total [ 3443.349560] pid_2 52KB 52KB [ 3443.350150] IEEE-802.15.4-RAW 31KB 31KB [ 3443.350759] fib6_nodes 28KB 28KB [ 3443.351373] ip6_dst_cache 41KB 41KB [ 3443.351962] PINGv6 30KB 30KB [ 3443.352571] RAWv6 154KB 154KB [ 3443.353168] UDPv6 62KB 62KB [ 3443.353777] TCPv6 62KB 62KB [ 3443.354382] scsi_sense_cache 8KB 8KB [ 3443.354975] sd_ext_cdb 3KB 3KB [ 3443.355581] virtio_scsi_cmd 16KB 16KB [ 3443.356177] sgpool-128 119KB 119KB [ 3443.356780] sgpool-64 63KB 63KB [ 3443.357392] sgpool-32 189KB 189KB [ 3443.357984] sgpool-16 75KB 75KB [ 3443.358587] sgpool-8 41KB 60KB [ 3443.359179] io_kiocb 45KB 45KB [ 3443.359794] mqueue_inode_cache 62KB 62KB [ 3443.360414] nfs_commit_data 15KB 15KB [ 3443.361006] nfs_write_data 47KB 47KB [ 3443.361618] jbd2_inode 11KB 11KB [ 3443.362222] ext4_system_zone 3KB 3KB [ 3443.362812] ext4_io_end_vec 7KB 7KB [ 3443.363417] ext4_bio_post_read_ctx 15KB 15KB [ 3443.364057] dnotify_mark 3KB 3KB [ 3443.364662] dnotify_struct 3KB 3KB [ 3443.365275] bio-2 4KB 4KB [ 3443.365872] pid_namespace 7KB 7KB [ 3443.366477] posix_timers_cache 7KB 7KB [ 3443.367078] rpc_buffers 31KB 31KB [ 3443.367684] rpc_tasks 3KB 3KB [ 3443.368289] UNIX 390KB 448KB [ 3443.368886] tcp_bind_bucket 4KB 4KB [ 3443.369502] ip_fib_trie 8KB 8KB [ 3443.370098] ip_fib_alias 15KB 15KB [ 3443.370707] ip_dst_cache 8KB 8KB [ 3443.371319] PING 62KB 62KB [ 3443.371911] RAW 61KB 61KB [ 3443.372517] UDP 196KB 315KB [ 3443.373116] request_sock_TCP 7KB 7KB [ 3443.373721] TCP 60KB 60KB [ 3443.374329] hugetlbfs_inode_cache 30KB 30KB [ 3443.375268] bio-1 11KB 11KB [ 3443.376144] eventpoll_pwq 23KB 23KB [ 3443.376789] eventpoll_epi 43KB 43KB [ 3443.377406] inotify_inode_mark 117KB 117KB [ 3443.378008] request_queue 60KB 60KB [ 3443.378615] blkdev_ioc 22KB 22KB [ 3443.379220] bio-0 96KB 96KB [ 3443.379813] biovec-max 862KB 862KB [ 3443.380418] biovec-64 173KB 252KB [ 3443.381010] biovec-16 86KB 86KB [ 3443.381623] uid_cache 8KB 8KB [ 3443.382231] dmaengine-unmap-2 4KB 4KB [ 3443.382823] audit_buffer 7KB 7KB [ 3443.383427] skbuff_fclone_cache 105KB 105KB [ 3443.384041] skbuff_head_cache 1545KB 1560KB [ 3443.384644] file_lock_cache 51KB 51KB [ 3443.385258] file_lock_ctx 7KB 7KB [ 3443.385853] fsnotify_mark_connector 40KB 40KB [ 3443.386514] net_namespace 86KB 86KB [ 3443.387110] task_delay_info 131KB 131KB [ 3443.387715] taskstats 100KB 100KB [ 3443.388318] proc_dir_entry 307KB 307KB [ 3443.388911] pde_opener 47KB 47KB [ 3443.389527] seq_file 75KB 75KB [ 3443.390118] sigqueue 129KB 129KB [ 3443.390724] shmem_inode_cache 1250KB 1289KB [ 3443.391330] kernfs_iattrs_cache 239KB 239KB [ 3443.391940] kernfs_node_cache 5153KB 5153KB [ 3443.392546] mnt_cache 149KB 149KB [ 3443.393149] filp 2293KB 2460KB [ 3443.393760] names_cache 17918KB 18385KB [ 3443.394368] hashtab_node 274KB 274KB [ 3443.394959] ebitmap_node 1149KB 1149KB [ 3443.395562] avtab_node 4976KB 4976KB [ 3443.396157] avc_node 31KB 31KB [ 3443.396763] lsm_inode_cache 2674KB 2933KB [ 3443.397380] lsm_file_cache 163KB 188KB [ 3443.397973] key_jar 39KB 39KB [ 3443.398577] uts_namespace 15KB 15KB [ 3443.399172] nsproxy 7KB 7KB [ 3443.399779] vm_area_struct 918KB 1032KB [ 3443.400389] fs_cache 60KB 68KB [ 3443.400981] files_cache 244KB 318KB [ 3443.401596] signal_cache 383KB 494KB [ 3443.402190] sighand_cache 270KB 330KB [ 3443.402799] task_struct 1253KB 1391KB [ 3443.403405] cred_jar 147KB 160KB [ 3443.403996] anon_vma_chain 263KB 263KB [ 3443.404601] anon_vma 211KB 211KB [ 3443.405215] pid 96KB 101KB [ 3443.405805] Acpi-Operand 203KB 233KB [ 3443.406416] Acpi-ParseExt 23KB 23KB [ 3443.407004] Acpi-Parse 173KB 189KB [ 3443.407608] Acpi-State 141KB 157KB [ 3443.408213] Acpi-Namespace 24KB 24KB [ 3443.408807] numa_policy 3KB 3KB [ 3443.409418] trace_event_file 176KB 176KB [ 3443.410011] ftrace_event_field 280KB 280KB [ 3443.410627] pool_workqueue 32KB 32KB [ 3443.411232] task_group 16KB 16KB [ 3443.411824] mm_struct 337KB 409KB [ 3443.412427] vmap_area 102KB 102KB [ 3443.413020] page->ptl 204KB 204KB [ 3443.413631] kmemleak_scan_area 143KB 143KB [ 3443.414293] kmemleak_object 135375KB 143438KB [ 3443.414893] kmalloc-8k 4608KB 4608KB [ 3443.415497] kmalloc-4k 7368KB 7552KB [ 3443.416088] kmalloc-2k 3800KB 4128KB [ 3443.416693] kmalloc-1k 2262KB 3168KB [ 3443.417309] kmalloc-512 6517KB 7712KB [ 3443.417900] kmalloc-256 1163KB 1240KB [ 3443.418505] kmalloc-192 354KB 536KB [ 3443.419099] kmalloc-128 420KB 504KB [ 3443.419709] kmalloc-96 613KB 752KB [ 3443.420317] kmalloc-64 1418KB 1652KB [ 3443.420910] kmalloc-32 731KB 844KB [ 3443.421521] kmalloc-16 364KB 364KB [ 3443.422111] kmalloc-8 290KB 326KB [ 3443.422715] kmem_cache_node 43KB 43KB [ 3443.423322] kmem_cache 75KB 75KB [ 3443.423914] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=14870,uid=0 [ 3443.425515] Out of memory (oom_kill_allocating_task): Killed process 14870 (syz-executor.5) total-vm:93280kB, anon-rss:380kB, file-rss:34756kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 3443.540851] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3443.541987] CPU: 0 PID: 14809 Comm: in:imklog Not tainted 5.10.252 #1 [ 3443.542728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3443.543655] Call Trace: [ 3443.543957] dump_stack+0x107/0x167 [ 3443.544368] dump_header+0x107/0x689 [ 3443.544792] oom_kill_process.cold+0x10/0x15 [ 3443.545311] out_of_memory+0x1149/0x1440 [ 3443.545807] ? oom_killer_disable+0x280/0x280 [ 3443.546308] ? mutex_trylock+0x237/0x2b0 [ 3443.546798] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3443.547537] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3443.548269] ? lock_acquire+0xd7/0x470 [ 3443.548762] ? warn_alloc+0x190/0x190 [ 3443.549268] __alloc_pages_nodemask+0x51d/0x600 [ 3443.549800] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3443.550475] ? find_get_entry+0x2c8/0x740 [ 3443.550948] alloc_pages_current+0x187/0x280 [ 3443.551442] __page_cache_alloc+0x2d2/0x360 [ 3443.551934] pagecache_get_page+0x2c7/0xc80 [ 3443.552421] filemap_fault+0x177d/0x2210 [ 3443.552896] ? read_cache_page_gfp+0x30/0x30 [ 3443.553404] ? replace_page_cache_page+0x1200/0x1200 [ 3443.553976] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3443.554564] ext4_filemap_fault+0x87/0xc0 [ 3443.555035] __do_fault+0x113/0x410 [ 3443.555451] handle_mm_fault+0x1e53/0x3500 [ 3443.555928] ? __pmd_alloc+0x630/0x630 [ 3443.556373] ? vmacache_find+0x55/0x2a0 [ 3443.556820] ? vmacache_update+0xce/0x140 [ 3443.557308] do_user_addr_fault+0x56e/0xc60 [ 3443.557799] exc_page_fault+0xa2/0x1a0 [ 3443.558234] ? asm_exc_page_fault+0x8/0x30 [ 3443.558721] asm_exc_page_fault+0x1e/0x30 [ 3443.559185] RIP: 0033:0x7f34e098d08c [ 3443.559601] Code: Unable to access opcode bytes at RIP 0x7f34e098d062. [ 3443.560341] RSP: 002b:00007f34dff294d0 EFLAGS: 00010246 [ 3443.560954] RAX: 0000000000000961 RBX: 0000000000000000 RCX: 00007f34e098d08c [ 3443.561762] RDX: 0000000000001fa0 RSI: 00007f34dff29d00 RDI: 0000000000000005 [ 3443.562578] RBP: 000055cabc8d54c0 R08: 0000000000000000 R09: 000055cabc8d1e88 [ 3443.563382] R10: a3d70a3d70a3d70b R11: 0000000000000246 R12: 00007f34dff29d00 [ 3443.564181] R13: 0000000000001fa0 R14: 00007f34dff29d00 R15: 00007f34dff2a868 [ 3443.565046] Mem-Info: [ 3443.565363] active_anon:14829 inactive_anon:45176 isolated_anon:0 [ 3443.565363] active_file:0 inactive_file:33 isolated_file:0 [ 3443.565363] unevictable:0 dirty:0 writeback:0 [ 3443.565363] slab_reclaimable:6687 slab_unreclaimable:59942 [ 3443.565363] mapped:69643 shmem:116 pagetables:937 bounce:0 [ 3443.565363] free:2890 free_pcp:62 free_cma:0 [ 3443.568883] Node 0 active_anon:59316kB inactive_anon:180704kB active_file:0kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278572kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4064kB all_unreclaimable? yes [ 3443.571485] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3443.574418] lowmem_reserve[]: 0 1616 1616 1616 [ 3443.574951] Node 0 DMA32 free:5052kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:59316kB inactive_anon:180704kB active_file:72kB inactive_file:220kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3748kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3443.578150] lowmem_reserve[]: 0 0 0 0 [ 3443.578625] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3443.581039] Node 0 DMA32: 467*4kB (ME) 211*8kB (UM) 46*16kB (M) 17*32kB (UM) 3*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5156kB [ 3443.582764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3443.583745] 168 total pagecache pages [ 3443.584169] 0 pages in swap cache [ 3443.584571] Swap cache stats: add 0, delete 0, find 0/0 [ 3443.585179] Free swap = 0kB [ 3443.585535] Total swap = 0kB [ 3443.585873] 524158 pages RAM [ 3443.586237] 0 pages HighMem/MovableOnly [ 3443.586689] 105069 pages reserved [ 3443.587080] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=14809,uid=0 [ 3443.588861] Out of memory (oom_kill_allocating_task): Killed process 14796 (rsyslogd) total-vm:220876kB, anon-rss:1264kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3443.949625] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 3443.950832] CPU: 1 PID: 14807 Comm: systemd-journal Not tainted 5.10.252 #1 [ 3443.951627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3443.952559] Call Trace: [ 3443.952858] dump_stack+0x107/0x167 [ 3443.953279] dump_header+0x107/0x689 [ 3443.953706] oom_kill_process.cold+0x10/0x15 [ 3443.954208] out_of_memory+0x1149/0x1440 [ 3443.954670] ? oom_killer_disable+0x280/0x280 [ 3443.955174] ? mutex_trylock+0x237/0x2b0 [ 3443.955633] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3443.956294] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3443.956964] ? lock_acquire+0xd7/0x470 [ 3443.957448] ? warn_alloc+0x190/0x190 [ 3443.957971] __alloc_pages_nodemask+0x51d/0x600 [ 3443.958534] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3443.959337] ? find_get_entry+0x2c8/0x740 [ 3443.959817] alloc_pages_current+0x187/0x280 [ 3443.960312] __page_cache_alloc+0x2d2/0x360 [ 3443.960802] pagecache_get_page+0x2c7/0xc80 [ 3443.961297] filemap_fault+0x177d/0x2210 [ 3443.961760] ? read_cache_page_gfp+0x30/0x30 [ 3443.962256] ? replace_page_cache_page+0x1200/0x1200 [ 3443.962825] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3443.963416] ext4_filemap_fault+0x87/0xc0 [ 3443.963883] __do_fault+0x113/0x410 [ 3443.964295] handle_mm_fault+0x1e53/0x3500 [ 3443.964781] ? __pmd_alloc+0x630/0x630 [ 3443.965236] ? vmacache_find+0x55/0x2a0 [ 3443.965682] ? vmacache_update+0xce/0x140 [ 3443.966153] do_user_addr_fault+0x56e/0xc60 [ 3443.966652] exc_page_fault+0xa2/0x1a0 [ 3443.967091] ? asm_exc_page_fault+0x8/0x30 [ 3443.967574] asm_exc_page_fault+0x1e/0x30 [ 3443.968036] RIP: 0033:0x7f37ed677116 [ 3443.968456] Code: Unable to access opcode bytes at RIP 0x7f37ed6770ec. [ 3443.969196] RSP: 002b:00007ffe580121b0 EFLAGS: 00010293 [ 3443.969803] RAX: 0000000000000001 RBX: 00005579d80c24a0 RCX: 00007f37ed677116 [ 3443.970609] RDX: 0000000000000014 RSI: 00005579d80c7540 RDI: 000000000000000c [ 3443.971410] RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007ffe581a4080 [ 3443.972210] R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 [ 3443.973017] R13: 0000000000000014 R14: 0000000000000000 R15: 0000000000000000 [ 3443.973867] Mem-Info: [ 3443.974159] active_anon:14829 inactive_anon:44756 isolated_anon:0 [ 3443.974159] active_file:18 inactive_file:34 isolated_file:0 [ 3443.974159] unevictable:0 dirty:0 writeback:0 [ 3443.974159] slab_reclaimable:6687 slab_unreclaimable:59679 [ 3443.974159] mapped:69664 shmem:116 pagetables:900 bounce:0 [ 3443.974159] free:2170 free_pcp:124 free_cma:0 [ 3443.977690] Node 0 active_anon:59316kB inactive_anon:179024kB active_file:72kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278656kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:3936kB all_unreclaimable? yes [ 3443.980290] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3443.983215] lowmem_reserve[]: 0 1616 1616 1616 [ 3443.983749] Node 0 DMA32 free:2196kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:59316kB inactive_anon:179024kB active_file:48kB inactive_file:144kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3600kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 3443.986964] lowmem_reserve[]: 0 0 0 0 [ 3443.987427] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3443.988938] Node 0 DMA32: 337*4kB (UME) 75*8kB (UM) 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1964kB [ 3443.990913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3443.991954] 168 total pagecache pages [ 3443.992396] 0 pages in swap cache [ 3443.992783] Swap cache stats: add 0, delete 0, find 0/0 [ 3443.993401] Free swap = 0kB [ 3443.993738] Total swap = 0kB [ 3443.994075] 524158 pages RAM [ 3443.994426] 0 pages HighMem/MovableOnly [ 3443.994868] 105069 pages reserved [ 3443.995271] Unreclaimable slab info: [ 3443.995691] Name Used Total [ 3443.996324] pid_2 52KB 52KB [ 3443.996921] IEEE-802.15.4-RAW 31KB 31KB [ 3443.997544] fib6_nodes 28KB 28KB [ 3443.998143] ip6_dst_cache 41KB 41KB [ 3443.998750] PINGv6 30KB 30KB [ 3443.999358] RAWv6 154KB 154KB [ 3443.999954] UDPv6 62KB 62KB [ 3444.000567] TCPv6 62KB 62KB [ 3444.001177] scsi_sense_cache 8KB 8KB [ 3444.001786] sd_ext_cdb 3KB 3KB [ 3444.002399] virtio_scsi_cmd 16KB 16KB [ 3444.003002] sgpool-128 119KB 119KB [ 3444.003614] sgpool-64 63KB 63KB [ 3444.004227] sgpool-32 189KB 189KB [ 3444.004826] sgpool-16 75KB 75KB [ 3444.005446] sgpool-8 41KB 60KB [ 3444.006046] io_kiocb 45KB 45KB [ 3444.006653] mqueue_inode_cache 62KB 62KB [ 3444.007276] nfs_commit_data 15KB 15KB [ 3444.007876] nfs_write_data 47KB 47KB [ 3444.008489] jbd2_inode 11KB 11KB [ 3444.009088] ext4_system_zone 3KB 3KB [ 3444.009720] ext4_io_end_vec 7KB 7KB [ 3444.010335] ext4_bio_post_read_ctx 15KB 15KB [ 3444.010984] dnotify_mark 3KB 3KB [ 3444.011595] dnotify_struct 3KB 3KB [ 3444.012211] bio-2 4KB 4KB [ 3444.012826] pid_namespace 7KB 7KB [ 3444.013443] posix_timers_cache 7KB 7KB [ 3444.014059] rpc_buffers 31KB 31KB [ 3444.014678] rpc_tasks 3KB 3KB [ 3444.015296] UNIX 390KB 448KB [ 3444.015899] tcp_bind_bucket 4KB 4KB [ 3444.016510] ip_fib_trie 8KB 8KB [ 3444.017107] ip_fib_alias 15KB 15KB [ 3444.017728] ip_dst_cache 8KB 8KB [ 3444.018343] PING 62KB 62KB [ 3444.018942] RAW 61KB 61KB [ 3444.019556] UDP 196KB 315KB [ 3444.020160] request_sock_TCP 7KB 7KB [ 3444.020775] TCP 60KB 60KB [ 3444.021388] hugetlbfs_inode_cache 30KB 30KB [ 3444.022030] bio-1 11KB 11KB [ 3444.022643] eventpoll_pwq 23KB 23KB [ 3444.023255] eventpoll_epi 43KB 43KB [ 3444.023850] inotify_inode_mark 117KB 117KB [ 3444.024472] request_queue 60KB 60KB [ 3444.025069] blkdev_ioc 22KB 22KB [ 3444.025686] bio-0 100KB 100KB [ 3444.026299] biovec-max 862KB 862KB [ 3444.026899] biovec-64 173KB 252KB [ 3444.027510] biovec-16 86KB 86KB [ 3444.028107] uid_cache 8KB 8KB [ 3444.028718] dmaengine-unmap-2 4KB 4KB [ 3444.029336] audit_buffer 7KB 7KB [ 3444.029933] skbuff_fclone_cache 105KB 105KB [ 3444.030563] skbuff_head_cache 1601KB 1601KB [ 3444.031162] file_lock_cache 51KB 51KB [ 3444.031770] file_lock_ctx 7KB 7KB [ 3444.032385] fsnotify_mark_connector 40KB 40KB [ 3444.033047] net_namespace 86KB 86KB [ 3444.033668] task_delay_info 131KB 131KB [ 3444.034284] taskstats 100KB 100KB [ 3444.034883] proc_dir_entry 307KB 307KB [ 3444.035501] pde_opener 47KB 47KB [ 3444.036100] seq_file 75KB 75KB [ 3444.036716] sigqueue 129KB 129KB [ 3444.037338] shmem_inode_cache 1250KB 1289KB [ 3444.037936] kernfs_iattrs_cache 239KB 239KB [ 3444.038568] kernfs_node_cache 5153KB 5153KB [ 3444.039169] mnt_cache 149KB 149KB [ 3444.039783] filp 2293KB 2460KB [ 3444.040396] names_cache 16201KB 16541KB [ 3444.040995] hashtab_node 274KB 274KB [ 3444.041617] ebitmap_node 1149KB 1149KB [ 3444.042230] avtab_node 4976KB 4976KB [ 3444.042831] avc_node 31KB 31KB [ 3444.043449] lsm_inode_cache 2674KB 2933KB [ 3444.044051] lsm_file_cache 163KB 188KB [ 3444.044668] key_jar 39KB 39KB [ 3444.045291] uts_namespace 15KB 15KB [ 3444.045893] nsproxy 7KB 7KB [ 3444.046508] vm_area_struct 918KB 1032KB [ 3444.047113] fs_cache 60KB 68KB [ 3444.047723] files_cache 244KB 318KB [ 3444.048332] signal_cache 383KB 494KB [ 3444.048926] sighand_cache 270KB 330KB [ 3444.049540] task_struct 1240KB 1365KB [ 3444.050136] cred_jar 147KB 160KB [ 3444.050745] anon_vma_chain 263KB 263KB [ 3444.051353] anon_vma 211KB 211KB [ 3444.051948] pid 96KB 101KB [ 3444.052557] Acpi-Operand 203KB 233KB [ 3444.053162] Acpi-ParseExt 23KB 23KB [ 3444.053771] Acpi-Parse 173KB 189KB [ 3444.054381] Acpi-State 141KB 157KB [ 3444.054974] Acpi-Namespace 24KB 24KB [ 3444.055582] numa_policy 3KB 3KB [ 3444.056175] trace_event_file 176KB 176KB [ 3444.056783] ftrace_event_field 280KB 280KB [ 3444.057408] pool_workqueue 32KB 32KB [ 3444.058003] task_group 16KB 16KB [ 3444.058613] mm_struct 337KB 409KB [ 3444.059222] vmap_area 102KB 102KB [ 3444.059818] page->ptl 204KB 204KB [ 3444.060427] kmemleak_scan_area 143KB 143KB [ 3444.061164] kmemleak_object 135669KB 143438KB [ 3444.061785] kmalloc-8k 4608KB 4608KB [ 3444.062396] kmalloc-4k 7104KB 7552KB [ 3444.062991] kmalloc-2k 3800KB 4128KB [ 3444.063602] kmalloc-1k 2262KB 3168KB [ 3444.064216] kmalloc-512 6710KB 7696KB [ 3444.064813] kmalloc-256 1163KB 1240KB [ 3444.065432] kmalloc-192 354KB 536KB [ 3444.066030] kmalloc-128 419KB 504KB [ 3444.066640] kmalloc-96 612KB 752KB [ 3444.067254] kmalloc-64 1425KB 1652KB [ 3444.067851] kmalloc-32 731KB 844KB [ 3444.068459] kmalloc-16 364KB 364KB [ 3444.069055] kmalloc-8 290KB 326KB [ 3444.069669] kmem_cache_node 43KB 43KB [ 3444.070280] kmem_cache 75KB 75KB [ 3444.070874] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=14807,uid=0 [ 3444.072792] Out of memory (oom_kill_allocating_task): Killed process 14807 (systemd-journal) total-vm:31724kB, anon-rss:772kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:84kB oom_score_adj:-250 [ 3444.147390] warn_alloc: 1 callbacks suppressed [ 3444.147402] syz-executor.5: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 3444.149255] CPU: 1 PID: 17154 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 3444.150031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3444.150960] Call Trace: [ 3444.151256] dump_stack+0x107/0x167 [ 3444.151664] warn_alloc.cold+0x95/0x18a [ 3444.152119] ? zone_watermark_ok_safe+0x260/0x260 [ 3444.152658] ? queue_oom_reaper+0x86/0x1e0 [ 3444.153145] ? wait_for_completion_io+0x270/0x270 [ 3444.153689] __alloc_pages_slowpath.constprop.0+0x1dd3/0x2320 [ 3444.154329] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3444.155444] ? lock_acquire+0xd7/0x470 [ 3444.155883] ? warn_alloc+0x190/0x190 [ 3444.156323] __alloc_pages_nodemask+0x51d/0x600 [ 3444.156845] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3444.157462] ? trace_hardirqs_on+0x5b/0x180 [ 3444.157946] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3444.158629] alloc_pages_current+0x187/0x280 [ 3444.159126] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 3444.159672] relay_open_buf.part.0+0x2a5/0xc00 [ 3444.160194] relay_open+0x531/0xa10 [ 3444.160608] do_blk_trace_setup+0x4cf/0xc10 [ 3444.161095] ? _copy_from_user+0xfb/0x1b0 [ 3444.161645] __blk_trace_setup+0xca/0x180 [ 3444.162190] ? do_blk_trace_setup+0xc10/0xc10 [ 3444.162786] blk_trace_ioctl+0x155/0x290 [ 3444.163283] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 3444.163839] ? do_vfs_ioctl+0x283/0x10d0 [ 3444.164298] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3444.164882] ? generic_block_fiemap+0x60/0x60 [ 3444.165388] ? lock_downgrade+0x6d0/0x6d0 [ 3444.165867] blkdev_ioctl+0xc1/0x710 [ 3444.166284] ? blkdev_common_ioctl+0x1930/0x1930 [ 3444.166820] ? selinux_file_ioctl+0xb6/0x270 [ 3444.167318] block_ioctl+0xf9/0x140 [ 3444.167723] ? blkdev_read_iter+0x1c0/0x1c0 [ 3444.168207] __x64_sys_ioctl+0x19a/0x210 [ 3444.168661] do_syscall_64+0x33/0x40 [ 3444.169075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3444.169657] RIP: 0033:0x7f689942fb19 [ 3444.170073] Code: Unable to access opcode bytes at RIP 0x7f689942faef. [ 3444.170802] RSP: 002b:00007f68969a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3444.171648] RAX: ffffffffffffffda RBX: 00007f6899542f60 RCX: 00007f689942fb19 [ 3444.172442] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 3444.173238] RBP: 00007f6899489f6d R08: 0000000000000000 R09: 0000000000000000 [ 3444.174040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3444.174845] R13: 00007ffc81b6d29f R14: 00007f68969a5300 R15: 0000000000022000 [ 3444.175666] CPU: 0 PID: 277 Comm: syz-fuzzer Not tainted 5.10.252 #1 [ 3444.175690] Mem-Info: [ 3444.176404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3444.176408] Call Trace: [ 3444.176421] dump_stack+0x107/0x167 [ 3444.176698] active_anon:14828 inactive_anon:44756 isolated_anon:0 [ 3444.176698] active_file:11 inactive_file:13 isolated_file:0 [ 3444.176698] unevictable:0 dirty:0 writeback:0 [ 3444.176698] slab_reclaimable:6687 slab_unreclaimable:59691 [ 3444.176698] mapped:69634 shmem:116 pagetables:896 bounce:0 [ 3444.176698] free:2112 free_pcp:118 free_cma:0 [ 3444.177631] dump_header+0x107/0x689 [ 3444.177645] oom_kill_process.cold+0x10/0x15 [ 3444.177935] Node 0 active_anon:59312kB inactive_anon:179024kB active_file:44kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:3936kB all_unreclaimable? yes [ 3444.178330] out_of_memory+0x1149/0x1440 [ 3444.178345] ? oom_killer_disable+0x280/0x280 [ 3444.181845] Node 0 [ 3444.182259] ? mutex_trylock+0x237/0x2b0 [ 3444.182269] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 3444.182282] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 3444.182784] DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3444.185420] ? lock_acquire+0xd7/0x470 [ 3444.185433] ? warn_alloc+0x190/0x190 [ 3444.185884] lowmem_reserve[]: [ 3444.186410] __alloc_pages_nodemask+0x51d/0x600 [ 3444.186653] 0 [ 3444.187119] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3444.187806] 1616 [ 3444.188461] ? find_get_entry+0x2c8/0x740 [ 3444.188476] alloc_pages_current+0x187/0x280 [ 3444.191351] 1616 [ 3444.191790] __page_cache_alloc+0x2d2/0x360 [ 3444.192220] 1616 [ 3444.192567] pagecache_get_page+0x2c7/0xc80 [ 3444.193078] [ 3444.193298] filemap_fault+0x177d/0x2210 [ 3444.193315] ? read_cache_page_gfp+0x30/0x30 [ 3444.193993] Node 0 [ 3444.194235] ? replace_page_cache_page+0x1200/0x1200 [ 3444.194246] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3444.194259] ext4_filemap_fault+0x87/0xc0 [ 3444.194269] __do_fault+0x113/0x410 [ 3444.194282] handle_mm_fault+0x1e53/0x3500 [ 3444.194295] ? find_held_lock+0x2c/0x110 [ 3444.194306] ? __pmd_alloc+0x630/0x630 [ 3444.194320] ? vmacache_find+0x55/0x2a0 [ 3444.194335] do_user_addr_fault+0x56e/0xc60 [ 3444.194350] exc_page_fault+0xa2/0x1a0 [ 3444.194360] ? asm_exc_page_fault+0x8/0x30 [ 3444.194370] asm_exc_page_fault+0x1e/0x30 [ 3444.194376] RIP: 0033:0x43b13b [ 3444.194385] Code: Unable to access opcode bytes at RIP 0x43b111. [ 3444.194390] RSP: 002b:000000c000495e50 EFLAGS: 00010206 [ 3444.194399] RAX: 0000000000000000 RBX: 00000000000003e6 RCX: 0000000000000000 [ 3444.194405] RDX: 000000003b8730ea RSI: 000000c000495840 RDI: 0000000000000003 [ 3444.194411] RBP: 000000c000495f28 R08: 0000000000000000 R09: 0000000000000000 [ 3444.194419] R10: 00000000000003e6 R11: 0000000000000246 R12: 0000000000000003 [ 3444.194427] R13: 000000c0000adc80 R14: 0000000000e5dacd R15: 0000000000000000 [ 3444.195252] Mem-Info: [ 3444.195787] DMA32 free:1964kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:59312kB inactive_anon:179024kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3584kB bounce:0kB free_pcp:472kB local_pcp:236kB free_cma:0kB [ 3444.195965] active_anon:14828 inactive_anon:44756 isolated_anon:0 [ 3444.195965] active_file:11 inactive_file:13 isolated_file:0 [ 3444.195965] unevictable:0 dirty:0 writeback:0 [ 3444.195965] slab_reclaimable:6687 slab_unreclaimable:59691 [ 3444.195965] mapped:69634 shmem:116 pagetables:896 bounce:0 [ 3444.195965] free:2112 free_pcp:116 free_cma:0 [ 3444.196384] lowmem_reserve[]: [ 3444.196629] Node 0 active_anon:59312kB inactive_anon:179024kB active_file:44kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:3936kB all_unreclaimable? yes [ 3444.197106] 0 0 [ 3444.197321] Node 0 [ 3444.197775] 0 [ 3444.198310] DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3444.198542] 0 [ 3444.199115] lowmem_reserve[]: [ 3444.199716] [ 3444.199723] Node 0 [ 3444.200195] 0 [ 3444.200602] DMA: [ 3444.201073] 1616 [ 3444.201545] 1*4kB (U) [ 3444.201987] 1616 [ 3444.202443] 0*8kB 1*16kB [ 3444.202936] 1616 [ 3444.203374] (U) 0*32kB [ 3444.203858] [ 3444.204334] 1*64kB (U) [ 3444.204694] Node 0 [ 3444.205401] 0*128kB 1*256kB [ 3444.206038] DMA32 free:1964kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:59312kB inactive_anon:179024kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:3584kB bounce:0kB free_pcp:464kB local_pcp:228kB free_cma:0kB [ 3444.206833] (U) 0*512kB [ 3444.207668] lowmem_reserve[]: [ 3444.208501] 0*1024kB 1*2048kB [ 3444.209348] 0 [ 3444.210155] (M) [ 3444.210446] 0 [ 3444.213610] 1*4096kB (M) [ 3444.217153] 0 [ 3444.217515] = 6484kB [ 3444.217522] Node 0 [ 3444.220175] 0 [ 3444.220403] DMA32: 337*4kB [ 3444.220666] [ 3444.220867] (UME) [ 3444.223756] Node 0 [ 3444.223953] 75*8kB [ 3444.224326] DMA: [ 3444.224512] (UM) [ 3444.224762] 1*4kB [ 3444.224966] 1*16kB [ 3444.225229] (U) [ 3444.225458] (U) [ 3444.225739] 0*8kB [ 3444.225969] 0*32kB 0*64kB [ 3444.226305] 1*16kB [ 3444.226531] 0*128kB [ 3444.226819] (U) [ 3444.227002] 0*256kB [ 3444.227310] 0*32kB [ 3444.227561] 0*512kB [ 3444.227900] 1*64kB [ 3444.231065] 0*1024kB 0*2048kB [ 3444.231388] (U) [ 3444.231739] 0*4096kB [ 3444.232096] 0*128kB [ 3444.232313] = 1964kB [ 3444.232323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3444.232546] 1*256kB [ 3444.232747] 161 total pagecache pages [ 3444.233062] (U) [ 3444.233285] 0 pages in swap cache [ 3444.233294] Swap cache stats: add 0, delete 0, find 0/0 [ 3444.233563] 0*512kB [ 3444.233811] Free swap = 0kB [ 3444.234020] 0*1024kB [ 3444.234360] Total swap = 0kB [ 3444.234366] 524158 pages RAM [ 3444.234556] 1*2048kB [ 3444.234792] 0 pages HighMem/MovableOnly [ 3444.235040] (M) [ 3444.235300] 105069 pages reserved [ 3444.246384] 1*4096kB (M) = 6484kB [ 3444.246789] Node 0 DMA32: 530*4kB (UME) 127*8kB (UM) 48*16kB (U) 256*32kB (U) 190*64kB (U) 363*128kB (U) 173*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 121664kB [ 3444.248636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3444.249647] 161 total pagecache pages [ 3444.250082] 0 pages in swap cache [ 3444.250489] Swap cache stats: add 0, delete 0, find 0/0 [ 3444.251088] Free swap = 0kB [ 3444.251448] Total swap = 0kB [ 3444.251795] 524158 pages RAM [ 3444.252134] 0 pages HighMem/MovableOnly [ 3444.252606] 105069 pages reserved [ 3444.253002] Unreclaimable slab info: [ 3444.253462] Name Used Total [ 3444.254095] pid_2 52KB 52KB [ 3444.254715] IEEE-802.15.4-RAW 31KB 31KB [ 3444.255346] fib6_nodes 28KB 28KB [ 3444.255962] ip6_dst_cache 41KB 41KB [ 3444.256586] PINGv6 30KB 30KB [ 3444.257219] RAWv6 154KB 154KB [ 3444.257831] UDPv6 62KB 62KB [ 3444.258456] TCPv6 62KB 62KB [ 3444.259075] scsi_sense_cache 8KB 8KB [ 3444.259704] sd_ext_cdb 3KB 3KB [ 3444.260349] virtio_scsi_cmd 16KB 16KB [ 3444.260963] sgpool-128 119KB 119KB [ 3444.261611] sgpool-64 63KB 63KB [ 3444.262245] sgpool-32 189KB 189KB [ 3444.262855] sgpool-16 75KB 75KB [ 3444.263486] sgpool-8 41KB 60KB [ 3444.264095] io_kiocb 45KB 45KB [ 3444.264722] mqueue_inode_cache 62KB 62KB [ 3444.265380] nfs_commit_data 15KB 15KB [ 3444.265996] nfs_write_data 47KB 47KB [ 3444.266634] jbd2_inode 11KB 11KB [ 3444.267262] ext4_system_zone 3KB 3KB [ 3444.267872] ext4_io_end_vec 7KB 7KB [ 3444.268502] ext4_bio_post_read_ctx 15KB 15KB [ 3444.269187] dnotify_mark 3KB 3KB [ 3444.269818] dnotify_struct 3KB 3KB [ 3444.270453] bio-2 4KB 4KB [ 3444.271070] pid_namespace 7KB 7KB [ 3444.271696] posix_timers_cache 7KB 7KB [ 3444.272343] rpc_buffers 31KB 31KB [ 3444.272960] rpc_tasks 3KB 3KB [ 3444.273597] UNIX 390KB 448KB [ 3444.274231] tcp_bind_bucket 4KB 4KB [ 3444.274841] ip_fib_trie 8KB 8KB [ 3444.275470] ip_fib_alias 15KB 15KB [ 3444.276074] ip_dst_cache 8KB 8KB [ 3444.276702] PING 62KB 62KB [ 3444.277339] RAW 61KB 61KB [ 3444.277963] UDP 196KB 315KB [ 3444.278599] request_sock_TCP 7KB 7KB [ 3444.279224] TCP 60KB 60KB [ 3444.279834] hugetlbfs_inode_cache 30KB 30KB [ 3444.280500] bio-1 11KB 11KB [ 3444.281115] eventpoll_pwq 23KB 23KB [ 3444.281760] eventpoll_epi 43KB 43KB [ 3444.282396] inotify_inode_mark 117KB 117KB [ 3444.283016] request_queue 60KB 60KB [ 3444.283650] blkdev_ioc 22KB 22KB [ 3444.284282] bio-0 100KB 100KB [ 3444.284886] biovec-max 862KB 862KB [ 3444.285528] biovec-64 173KB 252KB [ 3444.286134] biovec-16 86KB 86KB [ 3444.286762] uid_cache 8KB 8KB [ 3444.287390] dmaengine-unmap-2 4KB 4KB [ 3444.288002] audit_buffer 7KB 7KB [ 3444.288629] skbuff_fclone_cache 105KB 105KB [ 3444.289293] skbuff_head_cache 1620KB 1620KB [ 3444.289912] file_lock_cache 51KB 51KB [ 3444.290550] file_lock_ctx 7KB 7KB [ 3444.291161] fsnotify_mark_connector 40KB 40KB [ 3444.291846] net_namespace 86KB 86KB [ 3444.292480] task_delay_info 131KB 131KB [ 3444.293084] taskstats 100KB 100KB [ 3444.293728] proc_dir_entry 307KB 307KB [ 3444.294357] pde_opener 47KB 47KB [ 3444.294962] seq_file 75KB 75KB [ 3444.295586] sigqueue 129KB 129KB [ 3444.296224] shmem_inode_cache 1250KB 1289KB [ 3444.296847] kernfs_iattrs_cache 239KB 239KB [ 3444.297515] kernfs_node_cache 5153KB 5153KB [ 3444.298146] mnt_cache 149KB 149KB [ 3444.298787] filp 2293KB 2460KB [ 3444.299426] names_cache 16201KB 16541KB [ 3444.300034] hashtab_node 274KB 274KB [ 3444.300686] ebitmap_node 1149KB 1149KB [ 3444.301332] avtab_node 4976KB 4976KB [ 3444.301947] avc_node 31KB 31KB [ 3444.302594] lsm_inode_cache 2674KB 2933KB [ 3444.303219] lsm_file_cache 163KB 188KB [ 3444.303822] key_jar 39KB 39KB [ 3444.304442] uts_namespace 15KB 15KB [ 3444.305054] nsproxy 7KB 7KB [ 3444.305698] vm_area_struct 918KB 1032KB [ 3444.306322] fs_cache 60KB 68KB [ 3444.306947] files_cache 244KB 318KB [ 3444.307574] signal_cache 383KB 494KB [ 3444.308213] sighand_cache 270KB 330KB [ 3444.308818] task_struct 1240KB 1365KB [ 3444.309460] cred_jar 147KB 160KB [ 3444.310078] anon_vma_chain 263KB 263KB [ 3444.310705] anon_vma 211KB 211KB [ 3444.311331] pid 96KB 101KB [ 3444.311934] Acpi-Operand 203KB 233KB [ 3444.312562] Acpi-ParseExt 23KB 23KB [ 3444.313186] Acpi-Parse 173KB 189KB [ 3444.313815] Acpi-State 141KB 157KB [ 3444.314446] Acpi-Namespace 24KB 24KB [ 3444.315047] numa_policy 3KB 3KB [ 3444.315685] trace_event_file 176KB 176KB [ 3444.316317] ftrace_event_field 280KB 280KB [ 3444.316946] pool_workqueue 32KB 32KB [ 3444.317586] task_group 16KB 16KB [ 3444.318188] mm_struct 337KB 409KB [ 3444.319048] vmap_area 102KB 102KB [ 3444.319733] page->ptl 204KB 204KB [ 3444.320468] kmemleak_scan_area 143KB 143KB [ 3444.321611] kmemleak_object 135788KB 143438KB [ 3444.322301] kmalloc-8k 4608KB 4608KB [ 3444.323021] kmalloc-4k 7104KB 7552KB [ 3444.323793] kmalloc-2k 3800KB 4128KB [ 3444.324589] kmalloc-1k 2262KB 3168KB [ 3444.325281] kmalloc-512 6774KB 7696KB [ 3444.325988] kmalloc-256 1163KB 1240KB [ 3444.326636] kmalloc-192 354KB 536KB [ 3444.327277] kmalloc-128 419KB 504KB [ 3444.328044] kmalloc-96 612KB 752KB [ 3444.328682] kmalloc-64 1429KB 1652KB [ 3444.329463] kmalloc-32 731KB 844KB [ 3444.330236] kmalloc-16 364KB 364KB [ 3444.331003] kmalloc-8 290KB 326KB [ 3444.331766] kmem_cache_node 43KB 43KB [ 3444.332388] kmem_cache 75KB 75KB [ 3444.333000] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=277,uid=0 [ 3444.334985] Out of memory (oom_kill_allocating_task): Killed process 256 (syz-fuzzer) total-vm:1170952kB, anon-rss:203944kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:796kB oom_score_adj:0 [ 3444.405972] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 2. [ 3444.427520] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3444.549577] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 3444.559162] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 2. [ 3444.564933] systemd[1]: Stopped System Logging Service. [ 3444.907480] systemd[1]: Starting System Logging Service... [ 3445.659340] systemd[1]: ssh.service: Failed with result 'oom-kill'. [ 3445.661582] systemd[1]: ssh.service: Unit process 250 (sshd) remains running after unit stopped. [ 3445.681717] systemd[1]: ssh.service: Consumed 50min 12.890s CPU time. [ 3445.786779] systemd[1]: ssh.service: Scheduled restart job, restart counter is at 1. [ 3445.803181] systemd[1]: Stopped OpenBSD Secure Shell server. [ 3445.808885] systemd[1]: ssh.service: Consumed 50min 12.906s CPU time. [ 3445.813792] systemd[1]: ssh.service: Found left-over process 250 (sshd) in control group while starting unit. Ignoring. [ 3445.818107] systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. [ 3445.845670] systemd[1]: Starting OpenBSD Secure Shell server... [ 3445.926755] systemd[1]: Stopped target Bluetooth. [ 3446.055403] systemd[1]: Started System Logging Service. [ 3446.075022] systemd[1]: systemd-journal-flush.service: Succeeded. [ 3446.085987] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3446.088435] systemd[1]: Stopped Journal Service. [ 3446.090146] systemd[1]: systemd-journald.service: Consumed 2.948s CPU time. [ 3446.117841] systemd[1]: Starting Journal Service... [ 3446.119603] systemd[1]: Started Load/Save RF Kill Switch Status. [ 3446.254016] systemd[1]: Started OpenBSD Secure Shell server. [ 3446.269561] systemd-journald[17216]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3446.289046] systemd-journald[17216]: /dev/kmsg buffer overrun, some messages lost. [ 3446.290829] systemd-journald[17216]: /dev/kmsg buffer overrun, some messages lost. [ 3446.690091] systemd[1]: Started Journal Service. [ 3446.742771] systemd-journald[17216]: Received client request to flush runtime journal. VM DIAGNOSIS: 19:44:51 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffea00003bc8bf RDX=0000000000000000 RSI=ffff8880369ff280 RDI=ffff8880083ffa00 RBP=dffffc0000000000 RSP=ffff888047b7fb38 R8 =0000000000000000 R9 =ffffffff816cfd00 R10=ffff888046cc9800 R11=0000000000000001 R12=ffff888047b7fb70 R13=0000000080000000 R14=ffffffff80000000 R15=ffff888009052a00 RIP=ffffffff816cfd7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff6e8fc1700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2b644ef460 CR3=000000004a274000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=5f7463656a626f3a755f6d6574737973 XMM01=696b66725f646d65747379733a725f74 XMM02=00000000000000000000000000000000 XMM03=00000000000000ff000000ff000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f646d65747379732f62696c2f726176 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=1ffffffff0acf019 RDX=1ffff11001125470 RSI=0000000000000002 RDI=ffff88800892a380 RBP=ffff888008929a40 RSP=ffff88800893fce0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=0000000000000002 R13=dffffc0000000000 R14=ffff88800892a388 R15=0000000000000402 RIP=ffffffff8126f0f2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1431f58e70 CR3=000000000e988000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff0000000000000000000000000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000001ffffffff000055eeaa058950 XMM05=000055eeaa058a10000055eeaa0588b0 XMM06=00000000000000003030323a33696368 XMM07=00000000000000000000000000000000 XMM08=00000000000000410000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000